Ok, Of course they can do that. If someone can get into your computer from the net, pwn3ing the wlan just cuts out a step. I'm sceptical, perhaps foolishly, that it would be the wireless connection.

Undoubtedly he should have it locked down and use a random WPA key. BAD R.L. But the perpetrator being someone local, as opposed to someone across the world, possibly that R.L. has ot made nice with. Some scriptkiddie who he pissed-off, trailed his IP, logged in and wreaked havoc.

They couldn't get him at work cause they have a firewall and other security measures there. Or it's just random. Who knows.... Another reason to turn the computer off when not in use, not to mention all the other stuff we mentioned.