README.md: added an example of possible attack