Require email or captcha until this is resolved?

Sorry, idk how to cross post yet but I saw this? There's an exploit allowing mass registrations.