Multisite signup spam troubles

There is a known problem as described in this ticket and this blog post

The problem was identified in 2.9.2 but looks to also have been identified in 3.0.

From the sounds of it, the wordpress team won’t fix this bug, because they feel spam is inevitable, and that it is the responsibility of spam protection plugin authors to account for this bug.