what about attaching it to a linux box and just mounting it as a local device? I don't remember having to do anything special when I had my ipod color.
@chrisj: I tried but the phone itself is locked, so it doesn't work either...
the device will have deleted the AES-decryption keys after X attempts and even for a forensic expert the data is lost...
@Matthias2012: I don't know german at all (regarding the video), but do you know at which iOS version Apple has started to do this?
I thought this was simple to do offline if you open up the phone and remove the storage device. Invalid attempts aren't going to wipe it since that depends on the running OS software. You should be able to do that almost instantly if she was only using a four-digit PIN. I don't work with this much, so I don't know the specific tools, but I swear I've heard this attack discussed multiple times.
@ajohnson: I think I may have to follow this route... I will research on this topic and post my findings. I hope I won't have to buy new hardware...