Re: [GD-General] Is it possible to detect debugging?
Brought to you by:
vexxed72
|
From: Colin F. <cp...@ea...> - 2003-10-09 22:46:13
|
[1] IsDebuggerPresent()
[2] [...] WinDBG and kd can attach in noninvasive mode and generate a full
minidump [...]
As I suspected: Developers can check for obvious debugging (e.g., to handle
errors differently), but circumventing the check requires a very modest effort
(e.g., intercept IsDebuggerPresent() call, or use noninvasive debuggers).
Also, I suppose one could run the whole application within the context of an
80x86 emulator, so that it isn't running on the CPU as native instructions,
in which case the state of the code is totally exposed and there is no way
in the world the app could possibly detect that it was running in virtual
reality! (Much as we can't tell that we're living in the Matrix --
without pills, I mean.)
--- Colin
|