Lash wrote:I think I remember Craven saying they could
It can be done, but it's not fool proof. You can ban an IP address but that's only effective if the IP address is static. If it's Dynamic then you have to ban a whole range of IP addresses and then you run the risk of blocking out valid users.
You could block it by looking for a cookie, until the user clears their cookies out. You could block it by computer name but then the user can just change their computer name. There are lots of things you can do, but all are easy for the user to get defeat.
You could send some kind of signature file to their computer to look for, but a reformat would take care of that.
I guarantee you if I got banned I could get back in under a different name. That's not a dare.