> While basic security measures were implemented, in that customers were told to input card numbers using the handset, the unique audio tones generated by press

> While basic security measures were implemented, in that customers were told to input card numbers using the handset, the unique audio tones generated by pressing keypad buttons would make it straightforward to recover the 16-digit number and expiry date. How is that a "basic security measure"? It seems a lot more trivial for a machine to sweep the audio for the keypad tones and looks for 16 digits where the appropriate check digit check out, than to try to parse human speech.