diff --git a/chrome/js/builds/panel.js b/chrome/js/builds/panel.js
index 1123bde..79fcd4f 100644
--- a/chrome/js/builds/panel.js
+++ b/chrome/js/builds/panel.js
@@ -31,6 +31,10 @@ function get_fingerprinting_score(scriptData) {
 	}
 
 	// 15 points for each property access
+	// TODO language/userAgent/common properties should count less, others should count more?
+	// TODO use non-linear scale?
+	// TODO third-party scripts should count more?
+	// TODO count across domains instead of individual scripts?
 	for (var i = 0; i < Object.keys(scriptData.counts).length; i++) {
 		score += 15;
 		if (score > 100) {
diff --git a/src/js/panel.jsx b/src/js/panel.jsx
index 26a2c11..aeb242c 100644
--- a/src/js/panel.jsx
+++ b/src/js/panel.jsx
@@ -28,6 +28,10 @@ function get_fingerprinting_score(scriptData) {
 	}
 
 	// 15 points for each property access
+	// TODO language/userAgent/common properties should count less, others should count more?
+	// TODO use non-linear scale?
+	// TODO third-party scripts should count more?
+	// TODO count across domains instead of individual scripts?
 	for (var i = 0; i < Object.keys(scriptData.counts).length; i++) {
 		score += 15;
 		if (score > 100) {