Howdy: Face recognition on login via ssh

[cccaballero]

I think this is a big security issue.

When I try to login to my laptop (wish has howdy installed) via ssh it takes longer than it should, and I have found that is because it tries to make the face recognition.

The really big issue here, is that, if I am working in my laptop, anyone can access to it via ssh, because the face recognition is triggered and the ssh login is allowed.

How to reproduce:

• install howdy
• install ssh
• add face model
• access via ssh from a different PC using your username and ANY wrong password

This will trigger the face recognition, and if you are in front of your laptop the ssh access is allowed.

Linux distribution: Ubuntu 18.04
Howdy version: 2.3.0

[boltgolt]

This used to be handled by looking at the SSH_CONNECTION environment variable and aborting if it was found, looks like it's not there anymore. I'll get onto it immediately so a fixed should be released in a couple of hours.

[boltgolt]

Should be fixed in 2.3.1, which is pushed as high urgency release to all debian-based distros. @KelleyMcChes any chance you could update the arch version?

Thanks for noticing and reporting!