Gil points us to this new piece of malware.

Basically, it’s a way for spammers to get around that horrible Captcha code. The short version: A spammer tricks you into answering a captcha in order to get into a striptease program. What you don’t know is that the spammer is sending you the code he just grabbed from Yahoo mail. You type in your answer, the answer goes to the Yahoo mail interface and boom, he just grabbed another disposable email address.

Lesson 1: don’t try to get into striptease programs.
Lesson 2: we need universal webwide identity.
Lesson 3: in the meantime, we need new, friendlier, smarter captcha.