Howdy – Windows Hello style facial authentication for Linux

I know there was extensive testing when face recognition authentication came to smartphones. I wonder how an open source project like this one compares. I suspect there are substantially more false positives/negatives than on a commercially developed version that needs to support everyone to be successful.

Apple's Face ID uses what is essentially a 3D camera, a simple 2D color camera cannot compare to that in terms of accuracy.

Windows also uses infrared LEDs to light your face and prevent a flat photo from being recognised as a face.

AFAIK Pixel phones, including the Pixel 9, only use 2D images for face unlock. So it's definitely possible to reach mainstream quality with conventional cameras.

(Unless you'd argue that the face unlock found on Pixels is not passable either)

Apple has clearly done a lot of work in this space and have decided to retain Touch ID on Macbooks. I think this is fairly instructive.

That was primarily because the face id sensor stack is too thick to fit in the laptop lid

The point being that they think they need those sensors in order to create a secure system.

Windows is an operating system and does not have dependence on specific hardware being present.

There are definitely webcams that work with Windows Hello, and those that don't.

Incorrect. Windows Hello uses special hardware.

Right, Windows Hello requires it for facial auth, Windows itself does not. Hello still works, just you have to authenticate with a different method if the hardware isn't present.

I don't know how Google does it, but it's possible to extract 3d information from a 2d sensor. You either need a variable focus or phase detection in the sensor.

"A note on security

This package is in no way as secure as a password and will never be. Although it's harder to fool than normal face recognition, a person who looks similar to you, or a well-printed photo of you could be enough to do it. Howdy is a more quick and convenient way of logging in, not a more secure one.

To minimize the chance of this program being compromised, it's recommended to leave Howdy in /lib/security and to keep it read-only.

DO NOT USE HOWDY AS THE SOLE AUTHENTICATION METHOD FOR YOUR SYSTEM."