I'm so sick of comment spam I want to puke.
Even with my CAPTCHA code, I've consistently gotten 5-10 spam comments a day in the last week. Are they using the MetaBlogAPI to send the comments programatically and thereby circumventing the CAPTCHA? That's my best guess at this point...
Perhaps the SQL triggers that Chrissy LeMaire wrote might do the trick and I can dump the CAPTCHAs alltogether.
You see, this is one of the biggest problems, IMO, with choosing .Text as a blogging engine. It's great that it runs on .NET and it's very easy to implement and use. It's a total pain in the rear-end that there's not a great deal of community support for it and no “ecosystem” of add-in components. Take WordPress, as an alternate example. Kudos to Matt and the team for putting together an excellent solution. There's an entire infrastructure built up to support developers, skinners, and add-in creators. The Plugins site alone lists 5-6 comment/spam related plugins that you can drop right in. I don't see this changing in Community Server or CS:Blogs or whatever it's going to be called, either. To that end, I'm loading up WordPress in a virtual machine right now...stay tuned.