[shawnz]

These kinds of attacks aside, the intent is that you need to turn on the PC and then actually boot to the intended operating system, which is then protected with a login screen

[whyoh]

Yeah fair enough. The login screen should still provide good protection in a TPM-only scenario. (Although it had some vulnerabilities in the past: https://secret.club/2021/01/15/bitlocker-bypass.html)

[ale42]

Except that if you can sniff the encryption keys, you can tamper with the OS and for example remove the password...

[shawnz]

That's why I caveated my explanation with "these kinds of attacks aside": this video describes such a bus sniffing attack

[ale42]

I've read your message too quickly ;)