Elliott Back posted a comment to my proposed solution to comment spam.
He has setup an extreme spam stopgap measure. It uses Javascript to add a client-side hash, and then checks the MD5 hash on the server side (within a 60 second timeout) before allowing the comment. The only problems I see are for users without Javascript, or who take longer than a minute to write a comment.