update readme with an attack plan