> this attack is particularly alarming because it circumvents a TPM, FWIW, I think this phrasing is a little confusing. The TPM wasn't compromised at all. W

> this attack is particularly alarming because it circumvents a TPM, FWIW, I think this phrasing is a little confusing. The TPM wasn't compromised at all. What happened is that the attack trips systemd into a fatal error path where it gives up and just drops the user at a root shell (!!!). From there you can simply command the TPM to do its thing and cough up the key, and it will trust you because you're the presumably-authenticated boot firmware.