Just wagging around a picture is probably enough to fool a simple "did it change" detector. To do this sort of thing "properly", you'd want to make it a "challenge-response" biometric, in the sense that it asks you to do something and then you do it. Maybe that's a pattern of blinking your eyes. Maybe it's a pattern of where you look. Etc.