GPT-6 Astra — AI Defeats 48-Stage CAPTCHA Test

OpenAI developer Sharif Shameem posted a four-minute video on X on September 8 showing GPT-6 Astra clearing all 48 stages of a CAPTCHA game — a puzzle designed, in the article's own words, 'to distinguish humans from automated programs.' Forty-eight stages, four minutes, one employee, zero independent verification. That isn't a benchmark result; it's an endurance event with a leaderboard of one. The machines have now finished the world's most tedious obstacle course, and that obstacle course was the last thing we had that passed for proof of humanity.

The tasks ran from identifying traffic lights to parking cars using directional keys — the exact little chores we have all performed for free, for years, to persuade a website we weren't a bot. Now the bot does them in four minutes, on camera, as marketing. The report says the feat 'raises concerns about bypassing existing security systems,' which is the journalistic equivalent of noting that fire raises concerns about heat. Every ticketing queue and bank portal that leans on those tests is now leaning on a lock whose key has been filmed being turned, by the lockmaker's own staff.

And here's the garnish: last week we noted OpenAI asking Congress for mandatory national AI safety requirements. Within days, the company's own developer is doing a victory lap over the security apparatus everybody else depends on. The public evidence, per the report, is a four-minute clip on X, with the model tapping directional keys like a toddler at an arcade cabinet. Nothing says 'please regulate us responsibly' quite like shipping the capability first and letting the demo do the talking. The CAPTCHA was never really security — it was a speed bump with a moral — and we have now watched a frontier lab roll over it at speed, indicate, and publish the dashcam.