Hacker News Reader

The article says that the scammer sent a _screenshot_ of the email (so the email was just photoshopped, and not actually signed by facebook.com).

My fault - thanks for the clarification.

Actually you don't even need photoshop. Firebug would do.

So will Chrome's built in developer tools. No bloated browser or third party tools required.