Andrew Sampson, creator of the Aurous music streaming app, which was shut down after a law suit leading to Sampson's shame and heavy losses, apparently decided that if he was pulled down from the scene of content sharing, nobody should exist there. Apparently being hateful to everything around file sharing, he invents false accusations against Torrents Time with an aim to have it blocked or uninstalled. Or maybe he just wants the publicity, so he can finally find a job.

He just published a blog at http://blog.andrew.im/.

It is obvious that he's really envious of Torrents Time corner-to-corner wide acceptance and warm welcome and he decided, apparently, to take it down, by making false accusations, each of which we'll tear up and expose the lack of truth or professionality behind it.

Sampson says that Torrents Time is "new". He dares not say why he thinks Torrents Time is not new without quotes. Maybe he thought about it but didn't know how to implement it. Your guess us as good as mine. Had he been that clever, he would have used his brains to make a living. He's just using his guts to think, and for some reason, he's full of hatred. And we never had any issue with the guy.

He says that "Profiting from VPN “partnership”, trusting a random VPN service is a writeup for another day". So he says. Torrents Time checked the vpn service it embedded, for efficiency and safety and recommends it to its users, so as to protect their privacy. Simpson does not criticize the service at all. He is just against it. Who is he to say that?



He writes about Attack Vectors, and accuses Torrents Time of "stupidly" abusing CORS and "xposes a CORS enabled XHR object after requesting an instance of the plugin". He claims that he can now do a number of things to harm the users.



We're sure that all the users are happy now, that Simpsons warned them of how HE can attack their computers, teaching every teenager how to do it. Really the People's Protector! However, he's not that big a hacker, Torrents Time experts will put away each of his malicious ideas. One by one' as follows:



Forced Piracy: Torrents Time is indeed about allowing site operators to have torrents streamed directly from the browser. While you are reading this, or within a few hours, Torrents Time is already requesting the user's permission to download thru itself, or to deny the download.



User Tracking/Privacy: The full code of the XHR function which Sampson copied a part of, can be found here: https://github.com/torrentsTime/embed/blob/master/torrentstime.js - line 712. It's not that he dissected the application to retrieve it. It's an open source code.
Had he been honest or a pro or both, he would know and mention that Torrents Time is using old normal Javascript XHR object which is already in the browser. It is thus obvious to anybody with some knowledge of the matter (or who has no hidden agenda) that Torrents Time has no issue of CORS. None whatsoever. Sampson appears not to be the expert he claims to be (or he has a hidden agenda)



Even more privacy issues

This an invented issue: Every site in the web can issue third party requests. This is how the internet works. This seems to be another of Sampson's moody disorders. There's no issue here.


It runs as root on OSX

As part of Torrents Time revolutionary solution, it embeds an advanced direct integration with VPN applications and far reaching programs regarding users' anonymity. The application needs root permissions to enable Torrents Time's current and future advance features.


Redirect Plugin DownloadX

We don't see an issue here. Torrents Time is what it is, and it offers users to download it. That's normal. That's the way users get applications. Why would Sampson use Torrents Time to mislead users to download other files? He could use his own old files (if he is still allowed to use them).


XSS

The Pirate Bay can put on the page opened by the user any script it chooses. Nothing to do with Torrents Time. We've alerted them and the matter will be handled.


Sky rocket cpu usage/crash it:

Even clever Mr. Sampson doesn't know why he's machine consumes so much of his cpu or crashes. He may have installed a virus of his own. We've not have had a similar complaint from normal users, but if we do, we'll fix it. We know how to and we want the users to enjoy Torrents Time. Crashing their computers is not something we want.



Sampson's call for action ("Nuke Them") shows that he really is a terrorist. Luckily he does not have nuclear weapons, but users should beware.
Despite Sampson's hollow statements, Torrents Time does not enable attackers to control your computer! It's safe, User Friendly and Fun.