reality detection system Android malware uses accelerometer readings to figure out if it was running on a real phone or in emulation Cory Doctorow