Boyang Ma

EAI mobile applications are not just user interfaces; they represent a fragile cryptographic trust boundary that can be exploited to hijack physical control of AI systems.

MCP-based AI systems are alarmingly vulnerable to caller identity confusion, allowing unauthorized access to sensitive tools and operations after just one initial authorization.

Embodied AI's failures aren't just LLM or CPS problems; they arise from embodiment itself, where safe-seeming decisions cascade into real-world chaos.