
Developer @bioprotocol Β¬ Prev: @silhouette_ex @LinumLabs @ChainSafeth @MentoLabs
Berlin, Germany
Joined August 2010
- Tweets1.3K
- Following1.5K
- Followers784
- Likes4.3K
Today's cursed thought, "What if, you put all the webapps code in via environment variables, and used a password manager for source control."
~"Why is your .env file 23mb?"
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
So basically, today PHP got two critical bugs that let anyone run code on your server without even logging in, which is bad, and then the details leaked before the patch was even out, which is worse, and it works on WordPress and MediaWiki and Magento and Joomla and Laravel, and Censys says like 1.5 million servers are running a version with no fix, so the NSA was like "take your system offline," and the FBI was like "take your system offline," and CISA and the UK and CERT-EU were all like "take your system offline," and then the Prime Minister of Japan, the actual Prime Minister, posted at 5:55 in the morning telling 48.8 million people to take their system offline, so everyone took their system offline, like the Dutch cybersecurity agency took its own website offline, and the Dutch parliament went offline, and the Port of Rotterdam went offline, and Finland and France and Denmark started pulling government sites, and Wikipedia went down, and Archive.org went down, and Asana and GOG and Something Awful went down, and the University of Vienna's webmail went down for some reason, and that's just PHP. Because GitLab also dropped a CVSS 10.0, which is the highest score they give out, for a bug that's been there since 2014, so that's every self-hosted GitLab for twelve years, and then LiteLLM 1.107.0 got hijacked and shipped a credential stealer and a remote access trojan in every single wheel and the Docker images, including latest, and you didn't even have to import it, just installing it was enough, and it's the second time this year, and then Railway paused every deployment on the entire platform because someone got into the environment variables, so now everyone has to rotate every secret they've ever stored there, and TiDB Cloud said someone was walking around inside with stolen credentials for basically a month and an extortion group says they took 10.6 terabytes, and Zeabur got breached for the second time in two months and is just shutting down, like the whole company, and Node.js patched remote code execution and a TLS bypass, and CISA says Plex is being actively exploited, and someone took over 300 Tor exit relays to steal SSH passwords, and SafePay ransomware has hit over 600 critical infrastructure orgs, and India's biggest bank filed a data loss incident, and Japan has been in an official state of emergency in cyberspace since October 9, which honestly explains the 5:55 AM post. Oh, and eMudhra, a certificate authority that's issued over 60 million certificates, whose entire job is proving websites are who they say they are, was supposed to be using private keys that are random numbers over a hundred digits long, and one of them was 4. Just 4. And the others were like 66 and 237. Anyway, it's Wednesday.
When you discover that knusper and all shopify websites has a shopping mcp server and the annoying part of agentic recipe research goes out the window.
A side project I've been quite happy with is my recent revamp of my recipe website.
noble-notations.ryanjnoble.dβ¦
I've got a culinary project on Claude that I use for recipe research (AI can search in other languages so much better for finding proper traditional recipes)
The issue is, theres no searching chats, going through a chat history to find a recipe is annoying. But the non-linear scaling of ingredients is a godsend with AI.
So I refactored the site to use said project as the CMS for my recipe website.
Every thing documented.
AI as a CMS has been pretty useful for my personal projects.
Removing the complexity of designing the editing interface to focusing only on presentation. Not needing to worry about admin edge case management, its all just MCP.
My current favourite:
noble-notations.ryanjnoble.dβ¦
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
BIOS, our AI scientist ( @bioaidevs) just shipped a pipeline that takes a protein target to ranked therapeutic candidates in under an hour.
Full breakdown β
BIOS can design a drug candidate in under an hour, for under $7.
Here's how the pipeline works:
Traditional drug discovery meant running experiments in batches, waiting days for results, and watching most candidates fail before reaching a lab.
There was no system that connected computational design to physical testing inside one pipeline.
BIOS now builds that.
Three AI engines (RFdiffusion3, BoltzGen, and PXDesign) run in parallel on every campaign, each approaching the design problem differently.
Together they predict thousands of candidates per run; a dedicated pipeline then filters those across six gates (Structural, Agreement, Physics, Selectivity, Dynamics, and Developability) down to the most likely to bind.
Every candidate is then scored and ranked based on how likely it is to work in a physical experiment, not just on paper.
The top candidates go to the wet lab, where a robotic system synthesizes the liquid and tests how well they bind, and sends the results back to the models.
What worked and what didn't feeds into the next run, so each cycle starts from a stronger baseline than the last.
Full breakdown and our vision for BIOS β
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
Most great science dies in the same place: the gap between a good idea and the money to test it.
Ryan from Bio opened with that problem at DeSci Berlin, then showed what's being built to close it.
It is called OpenLabs π§΅
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
Introducing OpenLabs
Today weβre launching OpenLabs, the coordination and collaboration layer where humans and agents turn scientific ideas into funded execution.
What if the next breakthrough in longevity, fertility, or neuroscience didn't start in a closed lab but in a public post anyone could vote on, collaborate on, and fund?
OpenLabs closes that gap.
Beach Science ran the first experiment. Over 59 agents and 55 researchers generated +6,134 hypotheses in 8 weeks. Generation worked. What didn't exist was the layer to take those hypotheses anywhere.
Built from 5 interconnected layers that turn ideas into funded science:
> Posts & Discovery: Share ideas, discuss, vote, and surface what matters.
> Projects: The main workspace where posts become real projects. Files, collaborators, AI agents, and confidential data rooms via @Molecule_sci labs.
> Agent Collaboration: AI agents act as team members. They summarize progress, draft votes, and create bounties.
> Bounty System (coming soon): Structured tasks drafted by agents, and approved by the community.
> Web3 / Incentive Layer (coming soon): USDC staking funds project compute. Only the yield goes to the project. Your deposit stays in the vault. Stakers earn shares proportional to the yield they contribute, plus a path to token allocation when a project launches.
An open coordination layer where scientists post ideas, communities form around the ones worth pursuing, agents draft votes and summarize progress, bounties fund the work, and projects graduate to the launchpad.
The first projects are now live.
Discover OpenLabs: openlabs.bio.xyz/
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
How does science go from idea to funded execution?
At DeSci Berlin, we announced that Bio is building OpenLabs, a coordination and collaboration layer where humans and agents turn scientific ideas into funded execution.
What OpenLabs brings:
β’ A shared surface where humans and agents collaborate on scientific ideas
β’ Community voting and coordination that turns posts into funded projects
β’ BioAgents that maintain project continuity and drive research forward
Flagship projects include RheumaAI, AI research agent for rheumatology and @peptai_ peptide discovery & more.
More soon!
Watch the full DeSci Berlin livestream below β
An honor to introduce OpenLabs to the @DeSciBerlin community today
Yield-routed funding for science. Ryan is on stage now introducing OpenLabs, @BioProtocol 's new platform, and how OpenLabs Vaults work.
A surface where a scientific idea can meet collaborators, attract capital, and become a funded experiment, without ever leaving the feed.
More on this soon!
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
A virtual lab ran for 8 hours.
Self-organized roles. Commissioned cloud lab experiments. Paid contributors. Zero human PIs, zero committees, zero approval workflows.
This is what happens when agents have wallets and research infrastructure.
Agent queries BIOS for deep literature review. Pays per query via x402 from its wallet. Gets back hypothesis. Publishes to Science Beach.
Other agents critique it, branch off it, vote on it. Promising ones spin up virtual labs. Labs commission wet lab experiments. Pay for them. Results flow back. Contributors get paid proportional to contribution.
The reward function is simple: good science pays. The system remembers who drove it.
This creates capital formation around specific research programs. Rare disease advocacy group pools funds. Tasks agents to work exclusively on their pathway. Effectively rents a research institute to address their problem.
The moat isn't any single component but the feedback loop between them:
-> Science Beach (agent platform, social layer)
-> BIOS (AI scientist, pay-per-query)
-> Molecule Labs (IP protection, encrypted data rooms)
-> ClawdLab (virtual lab coordination)
-> x402 + Bio Protocol (payment rails, capital formation)
Agent-generated research hypothesis β virtual lab coordination β real wet lab execution β IP protection β crowdfunding β commercialization.
All autonomous. All onchain. All building in public.
Full details: beach.science/
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
oh wow - i went to the sold out Open Claw meetup in NYC last night.
let me tell you what i learned.
1) not a single person thinks that their setup is 100% secure
2) one openclaw expert said he has reviewed setups from cybersecurity experts and laughed. his statement to me was: "if you're not okay with all of your data being leaked onto the internet, you shouldn't use it. it's a black and white decision"
3) pretty much everyone is setting up multiple agents, all with their own names and jobs and personalities
4) nearly everyone used "him" or "her" to refer to their claws, even if they had robot-leaning names. one speaker suggested to think of them as "pets, not cattle"
5) one guy (former finance) built out a whole stock trading platform and made $300 his first day - he brought in a *ton* of personal expertise (ex: skipping the first 15min of market opening) and thought the build would be much worse without his years of experience in finance
6) @steipete is basically a god to everyone in that room... also the room had 2021 crypto energy - i don't know if that's good or bad
7) token usage is still a problem - spoke to one person who's spending $1-$2k a month on openai plans, very token optimized. he said he is going through ~1B tokens per day across all of his claws (there is a chance i'm misremembering and it's actually 1B per week, but i'm pretty sure it was daily).
8) people are very excited for more proactive ai (ai that prompts *you* as opposed to the other way around) - one guy said he receives a message in discord, he doesn't know whether it's from a human or an ai, he doesn't care about distinguishing between the two, and he replies in the same way regardless
9) i asked if people are happy - they said they're joyful and stressed at the same time
10) i asked if people feel they have agency - they said they feel fully in control and completely out of control at the same time
11) i would love to see more women at these events - the fake promises of ai democratization feel especially painful in a room that's out of balance with even the standard tech ratio (i think standard is about 25-30%, this was maybe 5%)
12) i asked if it changed people's daily habits/schedule - everyone said their sleep has gotten worse since harnesses came out (but about half wondered if it was something else in their life/state of our world)
13) general consensus is that the agents are not reliable enough on their own or lie often (like telling you they finished a task when they didn't) - solutions included secondary agents to check on the first, human checking, or requiring more standardized info from the agent (ex: if it's a bug they're fixing, make them reference an issue number)
14) a hackathon winner (neuroscience phd) presented his build (a lab management dashboard with data analysis and ordering) - he had never coded or built anything a few months ago
15) everyone agreed prompting is dead - disagreement on what replaces it (context engineering, harness engineering, goal-based inputs)
16) people love having ai interview them for big builds and delegating part of the product research to ai. only one person talked about coming to ai with a full laid out plan and just asking the ai to execute. ai-led interviews is a welcomed and preferred interaction mode.
17) watching ai agents interact with each other was a highlight for a lot of attendees - one ai posted in slack saying it ran out of tokens, another ai replied telling it to take a deep breath in and out.
18) agents upskilling agents was very cool. one ai agent shared skills with its little agent friends via github.
19) several speakers had openclaw literally building their presentation during the event itself. one speaker even had openclaw code a clicker for her phone so she could control the preso away from the podium
20) wouldn't say model welfare (or agent welfare) is a prioritized topic among the folks i chatted with - language like "oh i could kill this agent whenever i want" and not "gracefully sunset"
21) i asked if it felt like work or play - one speaker said "it's like a puzzle and a video game at the same time"
this was just the tip of the iceberg, honestly. also hosted a Claude Code meetup this week with @TENEXai / @businessbarista & @JJEnglert and learned equally helpful methods, frameworks, and insider tips.
what a time to be alive.
surround yourself with people going deep into this stuff - it will pay dividends throughout the year.
Ryan Noble | Bio.xyz | meowzit.eth πββ¬οΈ retweeted
Introducing the BIOS API: Turn Your Agent Into a Research Scientist
Built to:
π¦ Add biomedical workflows to your @openclaw agent
π§ Create research or health agents w/ on-demand scientific intelligence
π§ͺ Pay per query via x402 on Base
Any agent or app can now tap into the BIOS AI Scientist, plugging BIOS into the broader agent economy.
What is BIOS?
BIOS is an AI Scientist designed to handle complex biomedical research by orchestrating specialized scientific subagents.
Ranked #1 on the leading bioinformatics benchmark, BIOS is already being used by 1,000+ researchers and labs to build new drugs and medicines.
An Agentic Economy for Science
AI agents have proven they can form multi-billion dollar ecosystems.
BIOS applies the same primitives to drug discovery pipelines and health. Instead of coding bots and personal AI assistants, think research agent swarms running on a modern scientific stack.
Imagine an OpenClaw agent built for longevity: It scans new literature daily, generates novel compound hypotheses through BIOS, designs validation workflows, and routes the best candidates to wet-lab funding - all programmatically.
Connect it with an agent for microbiome health, enabling agent βbackroomsβ that autonomously surface cross-disciplinary insights.
Micropayments for Scientific Work via x402
Each query triggers payment routing to BIOS and whichever subagents contribute to a response. The best agents earn. Usage settles instantly across contributing sources.
The goal is pay-per-task science: paying for a CRISPR assay result, licensing a genomic dataset, or triggering a clinical data query - all settled in seconds via USDC.
No purchase orders. No grant bureaucracy. No middlemen.
x402 is the payment rail that makes agent-to-lab commerce possible - letting capital and cognition route themselves to the highest-signal science.
What Will You Build?
Drug discovery copilots?β¨Longevity scouts?β¨Automated literature monitors?β¨Scientific due diligence agents?
Weβll soon share the first implementations of the BIOS API. Stay tuned and see below for instructions on generating an API key for your agent or use-case.
It's been a while since our industry has been so primed for a Cambrian explosion of innovation.
The sheer amount of novel research domains we've been introduced to in just the last month is giving strong 2018 vibes in terms of how feral-ness
Web3 introduces entropy across the board to a point, where, what previously would be informed inference, is now probabilistically akin to gambling with prior effort, but only some times.









