Live data from Hacker News

Howdy – Windows Hello style facial authentication for Linux

github.com

31–40 of 47 posts

Re: Howdy – Windows Hello style facial authentication for Linux

#31
post #16

I wish we had good support for fingerprint readers instead.

I use fprintd and it works well with GNOME + builtin Elan sensor. It indeed needs more complex configuration than Touch ID or Windows Hello though.

In Fedora it's (supposed to be) pretty simple. Just go into settings -> users and add your fingerprint. In practice I usually have to use dnf to nuke pam and reinstall it manually for it to start working. But they have a good skeleton set up. Still no predesktop authentication, though.

Re: Howdy – Windows Hello style facial authentication for Linux

#32
post #18
post #13

Earlier quoted context omitted.

Apple's Face ID uses what is essentially a 3D camera, a simple 2D color camera cannot compare to that in terms of accuracy.

Windows also uses infrared LEDs to light your face and prevent a flat photo from being recognised as a face.

Windows is an operating system and does not have dependence on specific hardware being present.

Re: Howdy – Windows Hello style facial authentication for Linux

#33
post #18

Earlier quoted context omitted.

Windows also uses infrared LEDs to light your face and prevent a flat photo from being recognised as a face.

Windows is an operating system and does not have dependence on specific hardware being present.

There are definitely webcams that work with Windows Hello, and those that don't.

Re: Howdy – Windows Hello style facial authentication for Linux

#34
post #18

Earlier quoted context omitted.

Windows also uses infrared LEDs to light your face and prevent a flat photo from being recognised as a face.

Windows is an operating system and does not have dependence on specific hardware being present.

Incorrect. Windows Hello uses special hardware.

Re: Howdy – Windows Hello style facial authentication for Linux

#35

Earlier quoted context omitted.

Windows is an operating system and does not have dependence on specific hardware being present.

Incorrect. Windows Hello uses special hardware.

Right, Windows Hello requires it for facial auth, Windows itself does not. Hello still works, just you have to authenticate with a different method if the hardware isn't present.

Re: Howdy – Windows Hello style facial authentication for Linux

#36
post #13

Earlier quoted context omitted.

Apple's Face ID uses what is essentially a 3D camera, a simple 2D color camera cannot compare to that in terms of accuracy.

AFAIK Pixel phones, including the Pixel 9, only use 2D images for face unlock. So it's definitely possible to reach mainstream quality with conventional cameras. (Unless you'd argue that the face unlock found on Pixels is not passable either)

I don't know how Google does it, but it's possible to extract 3d information from a 2d sensor. You either need a variable focus or phase detection in the sensor.

Re: Howdy – Windows Hello style facial authentication for Linux

#37

I know there was extensive testing when face recognition authentication came to smartphones. I wonder how an open source project like this one compares. I suspect there are substantially more false positives/negatives than on a commercially developed version that needs to support everyone to be successful.

"A note on security

This package is in no way as secure as a password and will never be. Although it's harder to fool than normal face recognition, a person who looks similar to you, or a well-printed photo of you could be enough to do it. Howdy is a more quick and convenient way of logging in, not a more secure one.

To minimize the chance of this program being compromised, it's recommended to leave Howdy in /lib/security and to keep it read-only.

DO NOT USE HOWDY AS THE SOLE AUTHENTICATION METHOD FOR YOUR SYSTEM."

Re: Howdy – Windows Hello style facial authentication for Linux

#39

Earlier quoted context omitted.

AFAIK Pixel phones, including the Pixel 9, only use 2D images for face unlock. So it's definitely possible to reach mainstream quality with conventional cameras. (Unless you'd argue that the face unlock found on Pixels is not passable either)

I don't know how Google does it, but it's possible to extract 3d information from a 2d sensor. You either need a variable focus or phase detection in the sensor.

It is possible to infer phase from second order intensity via the Huygens-Steiner theorem for rigid body rotation, FWIU: https://news.ycombinator.com/item?id=42663342 .. https://news.ycombinator.com/item?id=37226121#37226160

Doesn't that mean that any camera can be used to infer phase (and thus depth for face ID, which is a high risk application)?

> variable focus

A light field camera (with "infinite" focus) would also work.

Re: Howdy – Windows Hello style facial authentication for Linux

#40

I wish we had good support for fingerprint readers instead.

It was relatively easy to setup a yubikey bio fingerprint device in arch with pam-u2f. I just kinda followed the wiki here: https://wiki.archlinux.org/title/Universal_2nd_Factor It wasn't strictly plug and play, but it only took like 20 minutes of fiddling.

I thought yubikeys only provided a sensor for the fact that the sensor was touched, vs fingerprint resets that actually distinguish whose fingerprint is touching the sensor before being usable as an authenticator
Post reply on HN