[deleted]
Bozo That’s another possibility. My thinking was it must be unlikely cellebrite can attack the device over usb with the data pins disabled by it being in restricted mode. It seems the usb attack surface should be somewhere between non existent and very small. Possibly it’s a different vuln via Bluetooth or something?
I believe it's usb based because it stated to plug all devices to premium as soon as possible to do IPR.
Bozo I didn’t see where they said the timing is a range where was that?
Forensic examiners have been discussing this in the cellebrite private community. It's not a precise time but definitely way longer than one hour.