Heh. So let's make sure I understand this. Solving the CAPTCHA will give the victim the illusion of regaining control of their computer, yet it's the last step

Heh. So let's make sure I understand this. Solving the CAPTCHA will give the victim the illusion of regaining control of their computer, yet it's the last step in creating a Facebook account? I'm actually a little impressed by this one. I'm not entirely sure I understand this part though: "The bad guys have made it difficult for Facebook to cut them off, since active members are actually creating the new accounts, says Correll." What difference would the creating account's age have when making a new one? Sure, it has the benefit of originating from a relatively legitimate IP, but the age of the now compromised account seems arbitrary in this context.