[elliottcarlson]

It's still a game of guesswork. Generally if you fail the CAPTCHA you will be offered a new one; and any good system should lock you out after a certain amount of failures.

[jerf]

Assume spammers are using botnets. The problem of locking them out is as hard as detecting them in the first place.