both IP and Mac can be faked, even easier to get what your computer is calling itself then a cookie hidden in it.