timeouts of few seconds are decent alternative to captcha. they can't be beaten.