aboutsummaryrefslogtreecommitdiff
path: root/README.md
diff options
context:
space:
mode:
Diffstat (limited to 'README.md')
-rw-r--r--README.md16
1 files changed, 16 insertions, 0 deletions
diff --git a/README.md b/README.md
index e69de29..c2c3a57 100644
--- a/README.md
+++ b/README.md
@@ -0,0 +1,16 @@
+# NoSession
+NoSession is a mod that protects your session ID.
+## Does this make me perfectly safe?
+This mod doesn't make you 100% safe, but it makes it much harder to steal your session token. If you want to stay perfectly safe, look at the
+[staying safe section](#staying-safe)
+
+## Staying Safe
+In order to work around an unpatchable security vulnerability, rename the NoSession jar to !.jar so it can load its protection before any other mods.
+This only protects you from other mods. There are fake verification sites that can steal your session ID through that method. Don't login with Microsoft
+OAuth to anything except maybe your Minecraft launcher.
+
+## Bug bounty
+See [SECURITY.MD](security.md)
+
+## Features
+- Does not break existing token login methods