diff --git a/TODO b/TODO
new file mode 100644
index 0000000..2b92cf1
--- /dev/null
+++ b/TODO
@@ -0,0 +1 @@
+- it appears TOS system variables aren't protected (at least the Cookie Jar can be read from user mode)