But it's likely cheaper easier and more reliable to just brute force the 6 digits. Apple used to slow down such attacks with timeout periods of 60 seconds then

But it's likely cheaper easier and more reliable to just brute force the 6 digits. Apple used to slow down such attacks with timeout periods of 60 seconds then 10 mins then hours but it seems they've entirely eliminated this cooldown process. I wonder if this was done at the advice of law enforcement. Why keep a fleet of exploits and post-ex ready when you could just plug in the phone and leave it for a few hours? Also, if you're concerned about such an attack, enable delete all data after 10 passcode attempts