> Imagine malware that could react differently when a debugger is attached. that has been the case for a long time: simply timing some instructions is generall

> Imagine malware that could react differently when a debugger is attached. that has been the case for a long time: simply timing some instructions is generally enough to tell you that you're running under a debugger. It's also helpful for copy protection.