ok, I'm admitting a level of defeat here and making it harder to post a comment. I really don't want to (you don't want to jump through hoops and I'm not a lion tamer) but the sheer volume of spam and ddos attacks here mean that I currently need to take some pretty drastic action.
And for the moment that means locking down commenting to only verified users. Registration is still there but I need to confirm the registration before you can comment. I've also killed all active sessions.
I don't like it, I don't want it. You don't need it, but it seems I do.
When I get some time I'll rewrite the spam-detecting/rejecting interface. At the moment it has slumped to only stopping around 85% …