Next I sent another faked email to Neill posing as Derrell, and spoofing his real email address. After we exchanged several messages back and forth, I told Neill that "I" was putting together a database to track every security issue so DEC could streamline the resolution process.