If you write a scrap with a URL in it, Orkut requires you to complete the image verification (CAPTCHA), however if you post any URL within the Google network you are not required to do so, this flaw can be used to post url's bypassing the image verification.