I would like to suggest that drupal.org introduces CAPTCHAs for user registration, to improve interactions with affiliates.

Background: On one of my more public Drupal sites (registry.gimp.org), I've been seeing lots of bogus user registrations. This was despite a proven captcha (by recaptcha.net) that has worked very well on other sites. Investigating this, I found that lots of the e-mails to those users bounced -- so how could they have passed e-mail acknowledgment? Then I noticed the "If you have a login at one of our affiliates..." remark and proceeded to turn off login referral to Drupal.org. Bingo: No more bogus accounts!

Now, this is of course workable for me and solves the issue. However, it totally breaks the idea of affiliate logins, which is good, IMHO, and the main affiliate is of course drupal.org.

I can wholeheartedly recommend recaptcha.net -- it is an excellent engine, supports audio and refresh and even gets some use out of those captchas, for OCRing books ;-)

cheers, Ingo