README: describe how the client attack works
Clarify license

The intent is that this can be used everywhere without restrictions, but
do not blame me if you break stuff. IANAL.