You're right to treat anything out of the ordinary as suspicious but the 3 character captcha is simply a bug left over from site hardening measures; it isn't a security risk so finding the root cause of it isn't a priority right now. Nothing to worry about when it appears, just refresh 'til you get a full length captcha. Libertas