In the comments to the entry on Sunday where I was talking about comment-spam, mal posted a link (thanks!) to this solution for movable type. Looks pretty good---essentially equivalent to what Yahoo! and Hotmail and other do to ensure that accounts are not being registered by a bot. I've downloaded it but not yet installed it, since I'd have to rebuild all of the static pages with the comments section included. Something to do over the weekend...