Ditch that fancy wide-format LCD monitor and go back to the days when animation was made up of moving frames played back by a specialized device. [Pieterjan Grandry] built this gif player which does just that. The frames of the animation are printed on a paper disk. When spun and viewed through a looking hole the same size as one frame an animated image is formed.

If you know a thing or two about how movie projectors work you might have a raised eyebrow right now. To make the animation smooth you need a way to hide the changing of the frames. With a projector there’s usually a spinning shutter (like a fan) that covers the transition between frames. In this case, [Pieterjan] has mounted the case of the gif player far enough in front of the paper disk that the image is in shadow, making it hard to see. A microcontroller responsible for the speed of the spinning disk flashes some white LEDs with precise timing which gives light to each frame at just the right time.

This is really a 2D equivalent to the 3D stroboscope we saw a few days ago.

[Thanks Agtrier]

[Fergus Kendall's] company is making development and breakout boards targeting electronic hobbyists. As with any endeavor that involves selling something, they need marketing. It sounds like [Fergus] was put in charge of getting some nice animated 360 degree images of each component. Instead of going through the drudgery of snapping frames by hand in a stop-motion-style, he whipped up a rotating platform that does the work for him.

The brain of the operation is a Boobie Board, a microcontroller breakout board that is one of their products. It controls a stepper motor attached to the cardboard platform via a quartet of power transistors. [Fergus] mentions in passing that their digital camera didn’t have a connection for a shutter trigger attachment. But they modded it to make things work. There’s no detail on that part of the hack but we’d wager that they soldered a transistor to the contacts for the shutter button.

The stepper motor has 48 steps, so the hardware is programmed to take 48 pictures which become the frames of an animated GIF – embedded after the break – to show off the product.

The attack is simply a mashup of a GIF picture and a JAR (Java applet). The malicious JAR is compiled and then combined with information from a GIF. The GIF part fools the browser into opening it as a picture and trusting the content. The reality is, the Java VM recognizes the JAR part and automatically runs it.

The researchers claim that there are multiple ways to deal with this vulnerability. Sun could restrict their Virtual Machine or web applications could continually check and filter these hybrid files, but they say it really needs to be addressed as an issue of browser security. They think that it is not only pictures at risk, but nearly all browser content.
More details on how to create these GIFARs will be presented at this week’s Black Hat conference in Las Vegas.