> The only attack TPM-backed disk encryption prevents is someone imaging the disk. The last section of the article you link says TPM 2.0 may fix the sniffing a

> The only attack TPM-backed disk encryption prevents is someone imaging the disk. The last section of the article you link says TPM 2.0 may fix the sniffing attack. It’s also worth noting that “someone imaging the disk” was really easy if you got even fairly brief access to the computer, whereas the other attacks that may still be viable involve invasive surgery and specialised knowledge of the hardware in question. (This is my understanding as a developer not particularly informed about boot arrangements, upon reading some relevant material. I could be wrong or have missed some nuance.)