I read the article, but I'm no expert. It seems to me that the APS analogy here is if I give my user name and password to my buddy, and he uses my account to make a horse's butt out of himself, and gets superultrapermabanned, then either of us create a new account from the IP address(es) that APS can identify,
(deep breath)
Then, Oleg sends a cease-and-desist letter (after cyber-sleuthing the physical address) which the process server verifies receipt. Then either of us creates a new account from a new IP and continues to make a horse's butt out of ourselves, then in the 9th Circuit Oleg can ask for charges to be pressed...
Is that accurate?