Bump. This in the wrong forum?
FYI, I went with Gregarius + BlogThat plugin.
You can avoid all the permissions issues by using php-cgiwrap.
A word of caution: if you have a moderately busy blog, you may find PHP exceeding the Pair limit of 16M, meaning periodic kills of the php process. See more info on this.
I’ve written a proposal for methods to cut down on referrer spam at blogs. Please see http://underscorebleach.net/content/jotsheet/2005/01/proposal_to_solve_referrer_spam_blacklist_stats
Although I’m a MT user, I’d be very interested to hear some WP users’ take on the issue.