First of all I know this is a forum about grapheneOS but I have seen numerous posts about iPhone security here so I thought it would be a good place to ask.
Police took my phone 4 months ago for a minor offence so I imagine that it’s low on their priority list and not going to get their strongest resources/effort thrown at it.
It was an iPhone 13 with lockdown and SDP enabled and an alphanumeric password.
They took it while it was in AFU.
I don’t know if my country has the technology to block the BFU reset (GrayKey Preserve?) but I think there’s a chance that even if they did, the SDP/Lockdown mode would have blocked the connection. So if it could last 3 days without any successful connection it will have gone into BFU which would increase my chances even more.
If I recall correctly SDP requires faceID to trust any computer even ones already trusted by the phone and lockdown mode already disables the usb data port while the phone is locked.
Also lockdown mode is supposed to reduce the software vulnerabilities/amount of code running on the phone which may block any AFU exploits if they even established a connection.
I see 3 scenarios:
1) they were able to bypass the lock via AFU exploit
2) they were able to block the BFU reset but can’t run any AFU exploit
3) they couldn’t block the BFU reset or run an AFU exploit and now need to brute force in BFU mode
What do you guys think?
The phone was on the latest iOS at the time. I think there’s a fair chance that the SDP and lockdown mode will have blocked any connection at least long enough for the phone to restart into BFU.