Apple can comply with the FBI court order
Summary: A federal judge ordered Apple to comply with the FBI's request for technical assistance in recovering the iPhone 5C of one of the San Bernardino gunmen, and Trail of Bits' Dan Guido assessed that all of the FBI's requests are technically feasible. Because the iPhone 5C lacks a Secure Enclave, a single customized iOS firmware image loaded in DFU mode could disable passcode delays and auto-erase, letting the FBI guess one passcode every 80ms - about half an hour for a 4-digit PIN, hours for a 6-digit PIN, or years for a 6-character alphanumeric password.
What's compelling: The 80ms hardware limit on the A6 chip means the passcode's strength, not Apple's cooperation, decides the outcome: a 4-digit PIN falls in half an hour, while a 6-character alphanumeric password holds for years.
Read the original at Trail of Bits Blog ↗