- itscybernews
- Posts
- The world's favourite video editor is in court for reading faces. A free one that never uploads your footage just hit #1 on GitHub — and scammers are already dressing up as both.
The world's favourite video editor is in court for reading faces. A free one that never uploads your footage just hit #1 on GitHub — and scammers are already dressing up as both.
CapCut is fighting a lawsuit over face scans and voiceprints. OpenCut — free, open source, nothing ever leaves your device — just topped GitHub. Here's the wonder, the trapdoor, and the one-second check that beats the scam.
Think about the last video you watched of a birthday, a wedding, a kid scoring a goal. There’s a decent chance it was cut together in CapCut — the free editing app from ByteDance (TikTok’s parent company) that sits behind an enormous share of the short videos on the internet. It’s genuinely brilliant software: auto-captions, one-tap effects, and a price of zero.
But “free” has been doing some heavy lifting. Since 2023, CapCut has been fighting a US class-action lawsuit alleging that the app quietly collected far more than your holiday clips — biometric face scans, voiceprints, precise location, and a striking list of hardware identifiers — without proper consent. A federal judge in Illinois has allowed the core privacy claims to proceed. None of it is proven yet, and ByteDance contests it. But millions of people looked at that headline and had the same quiet thought: it’s a video editor. Why does it need my face measurements?
This month, the internet’s answer to that thought hit #1 on GitHub’s trending chart. It’s called OpenCut, it’s free, and it’s built on one radical promise: your footage never leaves your device.
✨ The wonderful part: a video editor that physically can’t snoop
OpenCut is an open-source editor that runs entirely in your web browser. Not “uploads your video to our cloud and edits it there” — the processing happens on your own machine, in the browser tab. Close the tab and there’s no copy of your video sitting on someone’s server, because there never was one.
That one design choice quietly deletes a whole category of worry:
No uploads. Your kid’s birthday, your rough draft, your unlisted work demo — none of it travels anywhere. There is nothing for a company to harvest, leak, or get subpoenaed for.
No account, no subscription, no watermark. The three tollbooths of “free” editors are simply gone.
No installer. You visit the site and start editing. Remember that — it matters in a minute.
Open source. The code is public on GitHub. Anyone — including people far more paranoid than you — can read exactly what it does. With around 45,000 stars, a lot of paranoid people already have.
And it’s not a toy. The classic version does timeline editing, multi-track projects, keyframe animation and an effects system — the core of what most people actually use CapCut for. Behind the scenes, 90+ contributors have pushed over a thousand commits, and the team is rebuilding the engine in Rust so the same core can power web, desktop and mobile.
There’s something quietly lovely about how this happened. Nobody funded a rival ad-tech empire. A community looked at the most popular editor on earth, said “we can do the good parts without the surveillance parts,” and built it in public, for free. When it topped GitHub’s trending chart on July 13th, it beat projects from the biggest AI labs in the world — with a video editor whose headline feature is minding its own business.
So what could possibly go wrong with free software that respects you? Nothing — with the software. The trapdoor is in how you find it.
🎭 The trapdoor: “free editor, no watermark” is the oldest lure on the internet
Here’s the uncomfortable pattern that plays out every single time a free editing tool gets popular: criminals don’t attack the tool. They dress up as it.
It already happened to CapCut, at scale. Security researchers at Cyble found at least five fake “CapCut download” websites — pixel-perfect copies with a big friendly download button. Click it and you got a bonus feature the real app never had:
One campaign delivered Offx Stealer. Run the “installer” and you see a fake error message — app failed to launch — while, in the background, it’s quietly stealing your browser passwords and cookies, Discord and Telegram sessions, and cryptocurrency wallets.
One campaign used the fake site to plant BatLoader, which then fetched RedLine — one of the most widespread password-stealers in the world.
The trick works because of a simple, human moment: someone searches “free video editor no watermark” or “CapCut download” — often minutes after seeing a cool edit they want to copy — and clicks the first convincing result. The demand spikes every time CapCut is in the news (it briefly went dark in the US in January 2025 alongside TikTok, and search interest in alternatives exploded). Scammers surf exactly those waves.
Now OpenCut is the shiny new name. A trending, much-hyped, free editor is a gift to impersonators: expect lookalike domains, “OpenCut Pro installer” downloads, unofficial “mirrors,” and helpful YouTube tutorials pointing at the wrong link. The project is real and the code is clean — but nothing about a trustworthy project stops someone else registering a fake download site in its name and filling it with malware. The more loved the tool, the better the disguise.
And that’s the irony worth sitting with: the biggest security risk of the privacy-friendly editor isn’t the editor. It’s the download button that was never really its download button.
🛡️ The good news: this one is genuinely easy to defend against
No security team required. The whole defence fits on a sticky note.
Get it from the source, every time. OpenCut lives at opencut.app and on GitHub under OpenCut-app/OpenCut. CapCut lives at capcut.com and the official app stores. Type the address or follow the link from the project’s own GitHub page — not from an ad, a video description, or the third search result.
Remember: the real OpenCut has no installer. It runs in your browser. So if a website hands you an “OpenCut_Setup.exe” to run — that is, by definition, not OpenCut. The same logic catches most fake-app scams: when the genuine article doesn’t need installing, anything that does is wearing a costume.
Treat “free premium / no watermark / cracked version” as a flashing red light. That phrase is bait. It was bait for Photoshop in 2005, for CapCut in 2023, and it will be bait for whatever trends next month. The genuinely free tools never need a shady middleman.
A fake error message is a real infection. The “app failed to launch” trick is standard practice — the crash is theatre while the stealer goes to work. If you ran a downloaded “editor” and it mysteriously failed, change your important passwords from another device and run a malware scan. Don’t shrug it off.
For sensitive footage, prefer local-first tools generally. Anything edited in your browser or on your device can’t leak from a server that never saw it. That rule of thumb — does my file leave my machine, and did anyone tell me? — is worth asking of every “free” app you use.
Check what your current editor takes. On your phone, look at the app’s permissions (does a video editor need your contacts? your precise location?). You can often say no and the app works fine. Data it never gets is data nobody can lose.
✅ What to actually do
This week, pick the row that’s you:
You edit videos (or your kids do): try OpenCut at opencut.app — from that address, no other. If you stay on CapCut because you love it, that’s fine too: just get it only from official stores, and take two minutes to trim its permissions and your in-app privacy settings.
You’ve recently downloaded a “free editor” or “no-watermark” tool from a random site: take it seriously. Run a reputable malware scan, and change passwords for email, banking and any crypto — from a different device — if anything about the install felt off.
You’re just here to understand it: the lesson travels far beyond video. “Free + trending” is exactly where impersonation scams concentrate. The one-second habit of checking the address you’re actually on before downloading anything blocks nearly all of it.
And zoom out: watch the local-first wave. OpenCut is part of a broader quiet rebellion — software that does the work on your device and treats not-collecting-your-data as the feature. Every time one of these tops a chart, it’s a signal to every product team that privacy now wins users. That’s a trend worth rooting for — carefully, from the official link.
The takeaway
The most popular video editor on earth is in court over what it allegedly collected while you were adding captions to a birthday video. The internet’s response was not a boycott or a hearing — it was 45,000 developers starring a free tool whose whole personality is your footage stays yours, and pushing it to #1 on GitHub.
That’s the good news, and it’s real. The catch is as old as free software itself: the moment something free is loved, criminals wear it as a mask — and five fake download sites with a password-stealer behind the button have already shown exactly how that goes.
So enjoy the win. Edit the holiday video. Just do the one-second check that beats the whole scam: the real tool lives at the real address, and the real OpenCut never asks you to install anything at all. Free is finally getting trustworthy again. Make sure you’re getting it from the people who actually made it.
Click carefully, stay curious.
— itscybernews
Know someone who makes videos — a teen with a TikTok, a friend with a podcast, a colleague who edits the family holiday reel? Forward them this one: the “no installer means no fake installer” trick is the kind of thing you only need to hear once. And hit reply to tell us what you’d like us to dig into next — we read every one.