🔬Bio-security is an AI Arms Race - Eric Nguyen (CEO, Radical Numerics)
Source
RJ Honicky
Author
RJ Honicky
Date
Key takeaways · AI-distilled
Evo and Evo 2, genomic language models Eric Nguyen helped build at Stanford and Arc Institute, were later used by a separate Arc/Stanford team to generate whole bacteriophage genomes that were synthesized into functional viruses.
DNA has a four-letter alphabet but very long sequences (about 60K bases for an average human gene, roughly 3B for the whole genome), so the post credits long-context windowThe maximum amount of text a model can consider at once — its working memory for the current conversation or task.Full definition → architectures such as StripedHyena, about three years ago, with making genome models practical.
In a Radical Numerics experiment, the model saw RNA aptamers in ascending score order with the best ones held out; asked to continue the pattern, it recapitulated some of the higher-scoring held-out sequences, which the post frames as chain-of-thoughtHaving a model write out intermediate reasoning steps before its answer, which markedly improves performance on hard problems.Full definition → in DNA.
Nguyen says models trained on DNA already do well on RNA and protein because genes and protein-coding regions are marked in the sequence. He also says biosecurity defense is currently losing, and Radical Numerics argues for pushing the frontier harder.
Terms in this piece · Glossary
open weights — A model whose trained parameters are published for anyone to download and run — unlike API-only models you can access but never possess.
context window — The maximum amount of text a model can consider at once — its working memory for the current conversation or task.
chain-of-thought — Having a model write out intermediate reasoning steps before its answer, which markedly improves performance on hard problems.
Why it matters
Argues, using the OpenAI-to-Hugging Face attack as a concrete case, that open model weights strengthen defenders' capabilities as fast as they raise attacker capability, a load-bearing claim for open-vs-closed model policy debates.
