It looks like CAPCHA's days could be numbered. And not before time as I try to decipher the picture below the editor where I'm typing this.
Given such a simple idea as gridKey (working title - don't sue me) its not surprising that someone else thought of it first.
Maybe I'll get round to writing a PHP and/or PAM lib to implement it.