Any system will eventually be cracked and then patched
http://arstechnica.com/security/2012...-to-its-knees/
I am wondering if VBulletin Recapture ever needs updating manually
or is all the code maintained at google and automatically updated to the latest
without intervention on our part?
I find the best way is combination:
1) use promotion system to limit permissions of newbies until a certain number of posts
2) use Glowhost Spam-O-Matic (except dont' use the username verification)