We use mt-blacklist but that's not enough. I'm trying the technique described in Software Monoculture (found via Danny Ayers).