No technique is truly secure. Lycos introduced a "one time code" system on their SMS service to prevent automated robots spamming their service by creating a unique number in a GD-created image. Last I heard, someone had created a script that did OCR to read the number out...

--
jodrell.uk.net