Quite a few people seem to have thousands of "friends" on their list, most of which they don't actually know personally; they are there because they both play some kind of game (Mafia Wars, Farmville, etc). So the social captcha idea wouldn't work in that case either...