Ironically the only thing that will ever work is identifying a user to a person in one form or another. Otherwise it's just a never ending arms race.