Community-based project checks free and open source software.
'Toy like' devices go where researchers fear to tread.
PIV cards replace username and password.