The main ID can be revealed without any program. You can find a main ID with a web browser and alias ID.
He is probably booting the main ID not the alias.
You could try the things mentioned in the link above. If that doesn't help we'll have to wait for Yahoo! to patch it.