There's some truth to what he's saying.
Lets say you've got file sharing enabled on your comp. All he has to do is get your ip address then open up MSIE and type in
\4.65.203.67
(just made up the IP. Sorry if it belongs to someone 😃)
That will allow him to view all your network shares through his browser. Try it. Share some folders on your comp then type \ and your IP in MSIE. It's just like accessing a computer over the network.
\COMPUTER_NAME
\IP_ADDRESS
Same thing. It only works if the victim has shares. If not, then it's not gonna work. You could scan a range of IP's though for those sharing files. 😃
Cgraz