How not to design a CAPTCHA
On a site I administer that used to be deluged in spam, I managed to eliminate it with a three-pass filter:<p>1. Simple mathematical question, e.g. "What do you get if you add five and three?" Answer is processed on the server.<p>2. Hidden form field that is supposed to remain blank.<p>3. Blacklist of common spam words.