What I can think of is by IP address, but this won't work for corporations where everyone has the same address.
Otherwise cookies might work, but this will make faking happen easily here.
How exactly does SO do the job?
Now, if you think you're so good, what's the cookie value of my SO account? Three .. two .. one .. NOW!