1. TCP fingerprint
2. Individual identifier on how your screen draws canvas
3.Plugins and versions of them
4.Cookies
5.DOM storage
6.Ip address type (proxy, home net, mobile net)
7.MASSIVE database of user behavior on particular site
8.Screen size,window size.
9.Check if user agent is spoofed - every useragent has about 10 unique identifiers. and most spoofers are not aware of them.
10.Probably more..