Popcorn Time user numbers remain high

Popcorn Time, a pirated streaming app resembling Netflix, is still used by about 3.8 million people globally, according to researchers from eye.security. The app, which first appeared in 2014, allows users to watch movies and TV shows without proper licensing.

App functions as a video player and BitTorrent client

Popcorn Time operates as both a media player and a BitTorrent client, enabling users to download and stream content illegally. The user base is split roughly between Windows, macOS, and Android, though the exact distribution might not be entirely accurate due to technical limitations in tracking.

Security risks from unencrypted updates

The researchers warn that Popcorn Time and its similar app, Time4Popcorn, are highly insecure. The apps update themselves without encryption or verification, and they connect to multiple domains. Researchers managed to take control of one of these domains, but not all, leaving users vulnerable to potential attacks.

Researchers deploy a workaround to disable updates

The app's developers have not responded to security concerns, leaving the software insecure for years. In an unusual move, researchers pushed an update classified as malware to disable automatic updates, claiming it reduces risks. However, this action raises ethical questions about the methods used.

Recommendations for macOS users

For macOS users, researchers suggest removing the app or disabling updates using a specific terminal command. They also advise against using the software, which is based on an outdated version of Chrome from 2014 and lacks modern security features. The app remains vulnerable on public Wi-Fi networks, where hackers could potentially control it.