diff --git a/README.org b/README.org
index aeb5a7e..11198e8 100644
--- a/README.org
+++ b/README.org
@@ -68,7 +68,7 @@
 
 **** Managing logins & passphrases
 
-     - use a secure, cross-platform, _locale_ password manager, e.g keepass2
+     - use a secure, cross-platform, *cloudless* password manager, e.g keepass2
 
 **** Backup Secure Keys
 
@@ -91,8 +91,23 @@
 
      Solution: multi-boot!
 
-** TODO
+**** thumb drive setup
+
+     3 partitions: boot+isos, luks encrypted, unencrypted partition for non-sensitive data
+
+**** building kali linux iso [0/7]
+
+     - [ ] https://docs.kali.org/downloading/kali-linux-live-usb-install
+     - [ ] add encrypted persistence https://docs.kali.org/downloading/kali-linux-live-usb-persistence
+     - [ ] add kali meta packages https://www.kali.org/news/kali-linux-metapackages/
+     - [ ] https://docs.kali.org/development/live-build-a-custom-kali-iso
+     - [ ] customize live image contents https://live-team.pages.debian.net/live-manual/html/live-manual/customizing-contents.en.html#517
+     - [ ] add LUKS Nuke support https://www.kali.org/tutorials/nuke-kali-linux-luks/
+     - [ ] OPTIONAL add PowerShell https://www.kali.org/tutorials/installing-powershell-on-kali-linux/
+
+** TODO [0/4]
 
    - [ ] explain setup, ideas, practises
    - [ ] add HOWTO
    - [ ] seperate sources.list setup for server/desktop
+   - [ ] move to ansible for easier modularization of setup