I see it as the difference between APTs and script kiddies. Anyone with an investment of time, and a certain minimum of skill, can reconnoiter a system, identif

I see it as the difference between APTs and script kiddies. Anyone with an investment of time, and a certain minimum of skill, can reconnoiter a system, identify a weakness, exploit it for access and do bad things. The level of investment is high, so the expected reward has to be worth it. Once exploits are packaged into a piece of code you can just install and run and have it break into random systems, the investment is low so you for systems vulnerable to those attacks you get many many more incidents. Finding the requisite voice acting skills, training for the voice in question, and then identifying a number and calling it is a lot of investment in time and money and resources. (voice actors aren't cheap, especially if you're asking them to defraud someone's grandparents) But if this project is successful in being able to mimic a person's voice saying what ever you want it to say, then anyone hanging around a theme park could capture voice signatures, and relations, and then turn around and exploit the same for fraud without anyone else getting involved. To me, that seems like it would open up a large attack surface that is currently poorly defended at best.