Passwords, passwords...
I had an idea for securing a website with no passwords. Register with your email, and you're sent an activation link. Clicking the link takes you to an auto-login page that drops a persistent cookie. Every time you flush cookies or move to another computer
you have to reactivate your account.