The ID can be easily changed. A quick Google search will easily confirm this.<p>The question is can you change one devices ID to exactly match another. This might require hacking the BPP or finding a SHA1 hash collision, both of which are absolutely possible but not necessarily trivial.