Rob Reid on biosecurity risks: synthetic biology is exponential, and DNA supply chains are dangerously unregulated

Rob Reid on biosecurity: the DNA supply chain is the soft underbelly

Rob Reid built Rhapsody, the first unlimited on-demand music streaming service, before spending the better part of a decade going deep on synthetic biology risk through science podcasting and writing. He gave a TED talk warning about an unnatural pandemic shortly before COVID hit. Biosecurity is now what he calls his public service side, with roughly 2,000 hours invested over the years and one related VC investment made.

The core argument is that synthetic biology follows the same exponential curve as computing. What requires rare expertise today becomes a freshman biology project with the passage of time. Reid estimates roughly 30,000 people currently have the tools and know-how to animate the 1918 Spanish flu genome from DNA — a sequence the U.S. government posted publicly years ago, when far fewer people could do anything with it. That number will only grow.

“30,000 people roughly, perhaps a little more, have the tools and the know how, which would allow them to basically animate that virus just from the DNA if they felt like doing it... We need to make [DNA screening] mandatory. And there's actually an open letter signed by a lot of folks, including from AI Labs, just a few days ago pushing for that.”

The voluntary consortium problem

Most researchers who want to synthesize a long strand of DNA go to a service bureau. There is a voluntary industry group, the IGSC, that maintains a list of sequences of concern and screens orders against it. The IGSC claims to represent 80% of synthesized DNA worldwide, but Reid says that figure was a rough estimate made over a decade ago and doesn't account for Chinese suppliers who largely aren't members.

Even if the 80% figure were accurate, it wouldn't matter. A bad actor simply orders from a non-IGSC shop, and the screening costs actually make compliant labs more expensive. Reid's analogy: a town where 80% of bars enforce the drinking age is effectively a town without a drinking age.

An MIT professor, Kevin Esvelt, stress-tested this with an FBI-sanctioned red-team exercise. He split Spanish flu sequence orders across multiple IGSC-compliant labs. The full genome is among the most tightly regulated biological materials in existence, but each fragment in isolation is not. The labs filled the orders. Someone with Esvelt's expertise — and Reid puts the current pool at around 30,000 people — could then reassemble and animate the virus.

The fix is cheap

Reid argues the most urgent step is making DNA synthesis screening mandatory, not voluntary, and extending it to benchtop synthesizers that let people produce shorter strands at home without going to a service bureau at all. The open-source tools to do this already exist under the name SecureDNA. The cost is negligible. What's missing is a legal requirement and enforcement.

He frames this as a rare area of genuine U.S.-China alignment. Both countries have the most to lose from unconstrained DNA access, making an international mandatory regime politically achievable in theory. A recent open letter signed by AI lab leaders and others is pushing in this direction.

AI makes the timeline more urgent. The intersection of synthetic biology and AI models means the level of expertise needed to engineer something dangerous is compressing fast. Reid says the window is probably two to three years, though possibly already closed.

Biosurveillance as the detection layer

On early warning, Reid points to airports as the highest-leverage detection point. Wastewater from arriving international flights aggregates biological material from passengers worldwide. Sequencing that wastewater for novel genetic material growing exponentially across multiple airports could catch a stealth pathogen — something engineered with a long incubation cycle so carriers remain asymptomatic while it spreads. Reid says a serious biosurveillance network has been costed at roughly $50 million to set up and $10 million per year to run.

The historical analogy he reaches for is airport security itself. The U.S. recorded over 50 commercial airline hijackings in 1972, with no screening in place. Metal detectors were introduced, and the number dropped to zero in 1973. The lesson isn't that screening is a perfect solution — it's that raising the bar eliminates casual actors and concentrates the remaining threat into a population detectable by intelligence and law enforcement.

The same logic applies to DNA screening. You don't need to stop every possible attack. You need to make the attempt costly enough that it filters out everyone except the most determined, then use conventional tools to find them.