Re: [GD-General] Is it possible to detect debugging?
Brought to you by:
vexxed72
From: Colin F. <cp...@ea...> - 2003-10-09 22:46:13
|
[1] IsDebuggerPresent() [2] [...] WinDBG and kd can attach in noninvasive mode and generate a full minidump [...] As I suspected: Developers can check for obvious debugging (e.g., to handle errors differently), but circumventing the check requires a very modest effort (e.g., intercept IsDebuggerPresent() call, or use noninvasive debuggers). Also, I suppose one could run the whole application within the context of an 80x86 emulator, so that it isn't running on the CPU as native instructions, in which case the state of the code is totally exposed and there is no way in the world the app could possibly detect that it was running in virtual reality! (Much as we can't tell that we're living in the Matrix -- without pills, I mean.) --- Colin |