From 3fb80c8181d8f4ed4f798a9c451050c0fbb0929c Mon Sep 17 00:00:00 2001 From: pandaninjas <101084582+pandaninjas@users.noreply.github.com> Date: Sun, 25 Dec 2022 04:15:07 +0000 Subject: Update README.md --- README.md | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/README.md b/README.md index e69de29..c2c3a57 100644 --- a/README.md +++ b/README.md @@ -0,0 +1,16 @@ +# NoSession +NoSession is a mod that protects your session ID. +## Does this make me perfectly safe? +This mod doesn't make you 100% safe, but it makes it much harder to steal your session token. If you want to stay perfectly safe, look at the +[staying safe section](#staying-safe) + +## Staying Safe +In order to work around an unpatchable security vulnerability, rename the NoSession jar to !.jar so it can load its protection before any other mods. +This only protects you from other mods. There are fake verification sites that can steal your session ID through that method. Don't login with Microsoft +OAuth to anything except maybe your Minecraft launcher. + +## Bug bounty +See [SECURITY.MD](security.md) + +## Features +- Does not break existing token login methods -- cgit