Hacker News Reader

It's trivial as long as there are companies selling one-click solutions to do it.

If your budget is in the upper upper 5 digits range, it's trivial.

If a serious attacker is set on getting your stuff, it's just a matter of time and money. It's down to how much the data is worth for the attacker.

The brute force is trivial once you got the data, no pass phrase would be as secure. I think in this case a for loop on a single laptop would be fast enough.

but the os builds insert an increasing delay before allowing a next attempt.

like the first iteration of the for loop runs at time 0, fails;

second iteration gets to start 10 seconds later, fails;

third iteration gets to start 1 minute later, fails;

fourth iteration gets to start 1 hour later, fails;

and so on.

But this doesn’t matter if you extract the data from the phone first.

right, but having done this in a previous role, over a decade ago, for legit non state level reasons, it requires custom hardware to even start the conversation.