It's pretty easy to hack a comment form so that there's no real heavyweight craptcha but on the other hand a bot will not know to fill it unless your site is specifically targeted. Security by obscurity. Works like a charm for me.