Nice read!
Live systems rock (e.g. BackTrack, Liberte Linux etc.)
I recommend the use of TrueCrypt: Create a hidden volume, use cascading algorithms, put one or more wallet.dat inside the volume and encrypt it.
Please do backups of your USB devices, so even if someone would get hands on them, they couldn't decrypt it and steal your Bitcoin.