Your password.
 

Try to whisper yourself your password.

This seems like a bad idea to me, what happens.

Lmao, if you dont know, then by god you certainly do not deserve to know.

It's nothing bad, it's acctually a new improvement blizz made in 1.10 for super newbs who fall for those "Send me your password and I'll do blah blah blah" by scammers.

Just try it. Or if your scared try it ona different account.

I see, who would be dumb enough to fall for a scam.

Oddly enough, a lot of people. Thats why blizz implemented this....so newbie's dont get scammed out of what little shit they might have.

What happens?

How does it know THAT'S your password?

Do I smell a new method of stealing accounts?

What does happen? ive deleted d2 and dont have the cds anymore.

Lets say that my Act name is Sovereign, and my password is Sovereign. if i type "/w *insolence hey my name is sovereign", battle.net will not send the message to the person you selected to wisper, in this case a user by the name of insolence. Instead it will give you a message that your not allowed to send your password to anyone. SO no, `insolence`, it is not a new way of stealing accts, its a way of preventing more accts getting stolen by asshats who do that /dnd thing.

Sov, how does b.net KNOW that is your password? It has to be saved somewhere in memory, therefore it can be retrieved, and abused... if i am understanding this -.-

It can be abused. But thats not the problem. The problem is getting the person to download the trojan.

I remember a thread about this on mousepads forum where mousepad mentioned how it was basicly done and in theory admitted it would be very difficult to exploit it, so I'm not sure how easy this is going to be to get... When I first thought about it hit me because it'd have to be stored in memory for battle.net to be able to block it, but I dont know much about this... I just trust in mousepad's theory onthis

How does that /dnd thing work? I had always gone into games where they have "clans", and they give me a free ring cuz i join. Then they tell me to do /dnd something, and I just say "no, thanks for the ring, bitches. *leave*

You would not have to download a trojan, you could EASILY hide it in something like D2BS. Or just about anything else for that matter...

Well, i believe that your password is saved on teh bnet servers anyway. WHen you send a msg with a password, it goes to the server. The server recognizes it as your password, and sends you back an error message. ALL this does really is prevent the /dnd trick from being used.

Dnd means Do not disturb. WHen you are in a game, ill use a starcraft ladder ganme as an example, and you dont want to be disturbed so you can concintrate, type /dnd then a msg. When someone directly whispers you (not a /f m), it will return the msg that you typed. Its basically bnets version of an aaway msg.

Oh that makes sense sov.

Anyway, DND message works like this:
/dnd <msg>

I.E.
I type /dnd I am gaming bishes, charley murphys here.
Whenever anyone whispers me, it says i am in 'do not disturb mode' followed by my message: 'I am gaming bishes, charley murphys here.'

Well what if your password is something simple like "diablo"? You wouldn't be able to say Diablo.

Theoretically, you could just someone to type you different words from a list and get their password that way, but...

Well, I typed /dnd suckmyballs *queerfags one of the times.