iOS 12 tests Restricted mode that locks USB access after an hour
It could keep tools like the 'GrayKey' from accessing a locked iPhone.
In recent beta releases of iOS 11, Apple added a feature that disables device's ability to connect to accessories over USB after the phone has been locked for a period of time. In May, the lockout kicked in after a week, however, Elcomsoft (which makes forensic tools that can unlock and access data from mobile devices) noted just a couple of days ago that the iOS 11.4.1 beta release shortened the time to just one hour, and early testers of the iOS 12 developer beta are seeing the same thing there.
The apparent target here are unlocking tools of the varieties offered by companies like GrayShift and Cellebrite, which have been used by law enforcement to access locked and encrypted devices. According to Elcomsoft, the most recent 11.4 beta beefed up the Restricted Mode even more, because once it kicks in, the device does not communicate or transfer data over USB at all. iTunes cannot see it and the device will only charge until it is unlocked with the owner's passcode.
Their research notes a possible workaround. By connecting the phone or tablet to a trusted device within an hour of the last time it was unlocked and keeping it connected, they can extend the start of the one hour window indefinitely.
