Update README.md

README.md

@@ -22,9 +22,19 @@ This Space runs **VS Code on the Web** with a **full developer toolchain**, read
 - **Java**: OpenJDK 17  
 - **C#/.NET**: .NET SDK 8.0  
 - **Node.js 20**: npm, yarn, pnpm, TypeScript, ts-node, nodemon  
-- **CLI Productivity Tools**: git, git-lfs, htop, fzf, ripgrep, silversearcher-ag, rsync, sqlite3, tree, jq, net-tools, and *even* sqlite3.  
+- **CLI Productivity Tools**: git, git-lfs, htop, fzf, ripgrep, silversearcher-ag, rsync, sqlite3, tree, jq, net-tools  
 
-This container is designed to handle **Python, Rust, Go, Node, Java, C#, C/C++**, and more — all in one robust online IDE.
+---
+
+### 🔒 Security Hardening
+
+- **Bash history is disabled globally**:  
+  All interactive shells inside this container are launched with:
+  - `HISTFILE` unset  
+  - `HISTSIZE=0`, `HISTFILESIZE=0`  
+  - `.bash_history` linked to `/dev/null`  
+
+  👉 This ensures **no command history is ever logged to disk**, protecting sensitive tokens and commands.
 
 ---
 
@@ -37,7 +47,7 @@ Every 45 minutes, `/workspace` is automatically uploaded to your Hugging Face re
 
 > ⚠️ On first launch, the backup service will attempt to restore `/workspace` from your `BACKUP_REPO`. Make sure the repo exists. If empty, a fresh workspace will be created.
 
-Files are uploaded using a **cache-safe method** to avoid LFS errors.
+Backups are uploaded with a **cache-safe method** to avoid LFS errors.
 
 ---
 
@@ -49,9 +59,9 @@ Files are uploaded using a **cache-safe method** to avoid LFS errors.
 
    **Notes**:
    - Leaving either secret empty will **disable Auto Backup** and restore.  
-   - All files are wiped on Space restart. Using a private repo is highly recommended.
+   - All files are wiped on Space restart. Using either persistent storage space or the Auto Backup Service is highly recommended.
 
-2. Launch the Space → Access VS Code at `http://<space-url>:7860`  
+2. Launch the Space → Access VS Code at `http://<space-url>`  
    - No authentication by default (`--auth none`).  
    - Optional: enable a password via environment variables if desired.
 
@@ -59,10 +69,14 @@ Files are uploaded using a **cache-safe method** to avoid LFS errors.
 
 ---
 
-### ⚡ Quick Commands Cheat Sheet
+### ⚠️ Important Notes
+
+1. I **STRONGLY ADVISE** against putting credentials directly into the IDE. If you must use them, *remove them immediately* after use to prevent accidental leaks and misuse.  
+2. All command history is disabled for your safety — but *always treat the `/workspace` folder contents as sensitive*.  
+3. If you plan to duplicate this Space for backups, **DO NOT** make the Space public! Environment variables in Hugging Face Spaces can be exposed to anyone with container access (e.g., via `env`, `printenv`, or process inspection).  
+4. I am **NOT** responsible for any damages caused by leaked passwords/tokens from this Space — so take extreme care with your credentials.
+
+### ℹ️ Additional Notes
 
-**Python:**  
-```bash
-python3 myscript.py
-pip install <package>
-jupyter lab
+- Since this Space is hosted remotely (not local), you may experience some latency when performing actions.  
+- This IDE is designed for collaborative coding — so feel free to invite friends and enjoy a **feature-packed online coding adventure**! 🚀