I saw this super simple technique on a site to tell humans from spamming apps:

Ask a question on your comment form like:  "six plus seven equals what?" and validate for the correct answer.