There are two kinds of IP addresses– static (never changes– it is assigned to you by your ISP in perpetuity) and dynamic (changes every time you restart your modem).

If you're posting from work, and you work for a large company– or it's a small company, but they do business with a government agency (which require static IP addresses, so the government knows who is connecting every time)– the IP address is probably static.

But if you're working in a small office, and your ISP is Time-Warner, Cox, AT&T, Verizon, Windsteam, etc… it's probably dynamic. They pay to reserve a pool of addresses and, every time you turn your modem on, they give you the lowest available address.

Which means, all you have to do to change your IP address is turn your modem off, wait 30-60 seconds and then turn it back on again. When it makes a new connection, you have a new IP address.

Why am I revealing this super-secret method of defeating the B-J's security? Because anyone who works with computers knows it. Because anyone who wants access to a web site that only lets you log in for a limited amount of time each day knows it. Because people who've had problems with the

Because it probably won't prevent anything– the spoof guys will probably know this and start right in– so thinking that it will is just going to delay an effective security policy. So maybe the tech people at the B-J could implement something that works– registration where you have to select a user name (which can only be assigned to one person) and password, supply a valid e-mail address and receive a registration e-mail, which you then have to activate.

This doesn't mean you won't have "alan p" and "alan" and myriad other user names designed to confuse unsuspecting users. But it will require a little more work. And, unlike dynamic IP addresses, it's harder to change e-mail addresses.