Forgive me anons, I'm going to run a few tests for my own analysis. I'll let you know what I'm testing and my results once I've concluded the tests.

Test1

Test2

Test4

Test 6

So it appears that everything is IP based with regards to identification on here. Nothing is cookie related, even the CAPTCHAs. When you post from a new public IP, even with the same browser, you have to enter a CAPTCHA, but even hopping to a few different IPs and clearing caches, and even using a different browser on different hardware, 8ch only identifies you by the public IP you're posting from.

So to make this very simple, the Q team could VERY easily have a VPN concentrator somewhere safe and each one could connect a VPN client to it, even simultaneously, and make posts to maintain the same UID and IP hash. Being point-to-point encryption, there's no danger of eavesdropping MITM.