diff --git a/README.md b/README.md
index 053d506..99ef1ff 100644
--- a/README.md
+++ b/README.md
@@ -19,4 +19,14 @@ DECIMAL       HEXADECIMAL     DESCRIPTION
 1442464       0x1602A0        Squashfs filesystem, little endian, version 4.0, compression:xz, size: 6125436 bytes, 1832 inodes, blocksize: 262144 bytes, created: 2017-05-11 09:08:13
 ```
 
-Note that the device runs OpenWRT, albeit modified.
\ No newline at end of file
+Note that the device runs OpenWRT, albeit modified.
+
+# Things to try
+
+- Download the firmware from the device via serial headers
+- Diff the various firmware versions from the mi website
+- Upgrade the firmware on the device
+- See if the ssh password on the device can be reset
+- Figure out how to turn on ssh on the device
+- Get the `/data/` directory (it has the aes encryption key for backups)
+- See if the firmware upgrade process can be hacked to upload openwrt
\ No newline at end of file