How not to design a CAPTCHA
On a site I administer that used to be deluged in spam, I managed to eliminate it with a three-pass filter:1. Simple mathematical question, e.g. "What do you get if you add five and three?" Answer is processed on the server.2. Hidden form field that is supposed to remain blank.3. Blacklist of common spam words.