Hardware and IP bans are meaningless and serve to punish whoever gets the IP next or actually has the spoofed hardware address. Permanent account bans and a paywall are the answer - it's the only thing Bungie can use to mitigate hacking. And maybe after hackers have all payed 30 bucks 20 times to buy the game again, we'll see some whisper of the worm-esque secret mission pop up from all the extra funding. EVENTUALLY hackers will go where they are penalized less for cheating and right now D2 doesnt penalize any of their dozen free to play accounts for more than a day to a week.