Account Security and Public Games, Hardcore Hell, Diablo 3 API, Blue Posts

Also Today: Diablo 3 Patch Coming Soon
Update: added new blue on account security and updated old with Bashioks post.

Accounts Not At Risk in Public Games
Updated Reports have been coming in that hackers are able to get session IDs from public games and access your accounts via this method as seen in this thread. However Bashiok has just posted saying at this time all accounts that they have looked at have been compromised in traditional means. Meaning the above method is not something to worry about at this time.

[blizzquote author='Blizzard' blue='' battle='']We've been taking the situation extremely seriously from the start, and have done everything possible to verify how and in what circumstances these compromises are occurring. Despite the claims and theories being made, we have yet to find any situations in which a person's account was not compromised through traditional means of someone else logging into their account through the use of their password. While the authenticator isn't a 100% guarantee of account security, we have yet to investigate a compromise report in which an authenticator was attached beforehand.

If your account has been hacked, please view the previous post for information on contacting our support department.

It was Wayyyy too many at once and at the same time. It seems the attack was very orchestrated
It seems to me like it's the most logical way to go about it. Build up a list of accounts and passwords, and then hit them in a rapid succession before word can spread and people can change their passwords, add an authenticator, etc.® Account Security & Diablo® III
[blizzquote author='Blizzard' blue='' battle='']We'd like to take a moment to address the recent reports that suggested that® and Diablo® III may have been compromised. Historically, the release of a new game -- such as a World of Warcraft® expansion -- will result in an increase in reports of individual account compromises, and that's exactly what we're seeing now with Diablo III. We know how frustrating it can be to become the victim of account theft, and as always, we're dedicated to doing everything we can to help our players keep their accounts safe -- and we appreciate everyone who's doing their part to help protect their accounts as well. You can read about ways to help keep your account secure, along with some of the internal and external measures we have in place to help us achieve our security goals, at our account security website here:

We also wanted to reassure you that the Authenticator and Mobile Authenticator (a free app for iPhone and Android devices) continue to be some of the most effective measures we offer to help players protect themselves against account compromises, and we encourage everyone to take advantage of them. In addition, we also recently introduced a new service SMS Protect, which allows you to use your text-enabled cell phone to unlock a locked account, recover your account name, approve a password reset, or remove a lost Authenticator. Optionally, you can set up the SMS Protect system to send you a text message whenever unusual activity is detected on your account, keeping you aware of important (and possibly unwanted) changes.

For more information on the Authenticator, visit

For more on the Mobile Authenticator, visit

For more on SMS Protect, visit

We also have other measures built into to help protect players. Occasionally, when detects unusual login activity that differs from your normal behavior -- such as logging in from an unfamiliar location -- we may prompt you for additional information (such as the answer to one of your security questions) and/or require you to perform a password reset through the website. World of Warcraft players might be familiar with this security method already, and Diablo III players may begin to encounter it as well.

As always, if you think you've been the victim of an account compromise, head to the "Help! I've Been Hacked!" tool at for assistance.

Hardcore Hell Cleared
Some serious 'hardcore' Hardcore players have cleared Hell on hardcore. Develina sent in this great video of the fight.

Diablo 3 Hero API Closer Than Ever
We reported a few months back that we should be seeing the API by the end of the year, it looks like its not too far off now as we now have a preview of what it should look like.

[blizzquote author='Blizzard' blue='' battle='']With the release of Diablo 3, we are working hard to make career and hero profiles available to the community. With career and hero profiles, we are excited to also release a set of API resources specific to Diablo 3 for community fansites and developers to consume. I’d like to take this opportunity to give a preview of the progress we’ve made to the community and open up discussions around what data will be available.

Please keep in mind that this is an early preview and there will likely be many changes to the D3 API by the time it is released. Also note that we haven’t finalized several key pieces of information including artisan recipes, hero and follower spells and powers and achievements.

Career Profile

The career profile API provides top level (account) career information. This API resource is meant to provide a way to discover the heroes associated with an account as well as the artisan and game progression information for the account. To use the career profile API resource, a URL containing a battletag is crafted and a request is made. An example request for the Battletag “Straton#1” would be:


The following data structure is then returned:
[Click to see]

As you can see, there are several account specific data points to reference. The heroes attribute contains a list of all of the active heroes for the account. This list does not include fallen heroes. The artisans dataset includes a list of the artisans and the id, label, level and progression of each. Next are several progression attributes that can be used to determine the highest difficulty boss for each act. Last are several stats on the number of monsters and elites killed.

Hero Profile API

Hero profile API resources provide hero specific information including basic information like the name, class, gender and level as well as more complex information like follower information, hero statistics, active skills/powers and items. Unlike the career profile API resource, a hero id is used to craft a URL instead of a battletag. An example for hero 182 would be:


The following data structure is then returned:
[Click to see]

The first set of information provided includes the name, level and class information. Following that is a list of the hirelings the hero has unlocked. Lastly, a block of statistics is returned that includes stats, resistances and kills


Q: Will the AH have API access in a similar manner to WoW?
A: There are no plans to create an AH API (even read-only) for gold, hardcore gold or real money.

Q: What about achievements?
A: We do plan on providing all achievement information much like we do with the WoW API. The difference being that achievements are account bound.

Q: How will the request limits work? Is the "~3000" requests per day going to be shared between the D3 API and the WoW API?
A: The same as with the WoW API. The requests per-day limits will be shared between the APIs as most fansites and applications are game specific (with a few exceptions).

Will the AH have API access in a similar manner to WoW?
There are no plans to create an AH API (even read-only) for gold, hardcore gold or real money.

Please consider providing read-only Auction House access, at least for normal mode gold.
Building D3 AH APIs is not something that we will be dedicating resources to at this time.

How will the request limits work? Is the "~3000" requests per day going to be shared between the D3 API and the WoW API?
The same as with the WoW API. The requests per-day limits will be shared between the APIs as most fansites and applications are game specific (with a few exceptions).

Displaying Item Information.
Items and how they will be represented is still on the drawing board. When we make more progress and have a rough prototype, I'll be sure to update the community.

Any plans for a search API? Any way we could crawl for accounts to do aggregate statistics?
We haven't really come up with a good way to provide an index that doesn't compromise privacy or data that we don't want to expose. This is something we are thinking about though.

Any plans for giving us information about quest completion? Like how long it took them to clear a quest, perhaps including historical data if they've done a quest multiple times, and including party members involved in the kill?
I believe that this information will or should be available with achievement data and statistics.

What about events like "Killed Belial (Inferno) on "?

This data will also likely be made available with achievement data and statistics.

Diablo III Soundtrack Now on iTunes
[blizzquote author='Blizzard' blue='' battle='']Want the sounds of Sanctuary to accompany you wherever you go? The Diablo III Soundtrack is now available for purchase directly from iTunes! The new album features 23 tracks that score your journey through Sanctuary and beyond, from the familiar guitar that greets you in New Tristram to the epic orchestral arrangements that see you through your trials in the Burning Hells.

Also up on iTunes today: The Music of Diablo 1996-2011, a 17-track collection of some of the series' most memorable musical moments, put together to celebrate Diablo's 15-year anniversary in late 2011. Grab both of these albums, and bask in the hellish harmony.

Diablo III Soundtrack on iTunes
The Music of Diablo 1996-2011 on iTunes

Global Play Reminder: RMAH
With the RMAH coming soon, Blizzard is giving a quick reminder that the RMAH will only work in your default/home region.

[blizzquote author='Blizzard' blue='' battle='']Now that Global Play is live, players can create characters, set up friends lists, gather items, and use the gold-based auction house in every region where Diablo III is available. To access another region, simply click on the “Options” button from the login screen, select the “Account” tab, and then choose which region you want to play in from the “Regions” drop-down.

As a reminder: please note that once the real-money auction house is available, players will only be able to access it in their home region. This means that, for characters outside of your home region, items cannot be bought or sold in any real-money auction house. To provide an example, if your home region is the Americas, you will not be able to access the real-money auction house on characters you create in Europe or Asia.

The focus of Global Play is simply to give you the ability to play Diablo III together with your friends in any region. For more information on Global Play in Diablo III, see the FAQ.

Blue Posts
[blizzquote author='Blizzard']Weak Legendaries
1027.2 DPS 1hand MAGIC weapon on the AH. over 300 more DPS than the best, perfect Legendary 1h. Intended?
Legendaries are not automatically better than other items. Most are designed to be very good at a specific job.(Source)
However, I am getting lots of reports of weak legendaries. We will look into this. (Source)

Anyway we can get a hint of what pvp will be? Objective/arena based? Objective-based sounds a ton more fun than arena based.
PVP has not changed from what we've always promoted: team deathmatch in arenas. No ETA. Done when it's done. (Source)

Make Games Private
i meant like "limited to X number of players" i was playing a game with public off, and all my friends join whenever theywant
as I said, turn off the 'allow quick join' option in the social tab. No one can join your game without an invite. (Source)

D3 is really fun but huge let down on difficulty. Never lie about your games being "impossibly hard" again..
I wouldn't personally call death flopping to a boss the antithesis of difficulty, but whatevs. (Source)

Potion Cooldowns
Then mission accomplished. Blizzard probably wanted us to think about survivability in terms deeper than "God, I need to chug more potions!"
Bingo. (Blue Tracker / Official Forums)

General D3 Topic
Simple Solution: Almost all melee activated abilities should have a passive defensive included in the core ability. That is, while the wizard is forced to use an entire skill slot for Diamond Skin, the Barbarian (for example) should have diamond skin built into one of its abilities say... Revenge.
Monk and barbarian take 30% less damage base, than demon hunter, witch doctor or wizard. The melee classes also have passives and abilities which provide significant defensive bonuses.

Elites/Champions: The biggest problem here is not how hard they hit, but the fact that Blizz did not institute a way to avoid the damage like they did with the Act bosses. For example. Why can the "Jailer" automatically encase everyone without missing but Diablo seems to suffer from Down's syndrome when trying to trap people?
Because those fights are where you'll generally score the best loot, they are also intended to be some of the most challenging experiences in the game.

We didn't want 'boss farming' to become the goal of Diablo III the way it was in DII. We like that getting the best items is more of a treasure hunt, where finding and slaying those champion packs is what drives players to adventure through the levels. It's also a good thing that those are thrilling and difficult fights once you find them. Sometimes they're brutal, but this is Diablo III on a difficulty titled 'Hell'. Sometimes brutal is okay.

Act Bosses: Seriously, the act bosses should not be easier than the elites/champions. The fact that this is currently the case is inexcusable.
Answered above.

You do realize he just explained WHY they want you farming elites. A boss is a guaranteed spot everytime. Elite packs are everywhere, Caves, in the open, in dungeons, etc. This is their solution to getting you to participate in more content.
This is the heart of the design decision, yes. It's more engaging to get into a level, explore the randomly spawned caves, and go poking around in the nooks and crannies.

If you've ever done boss speed runs in DII for hours on end, then you might get a glimpse of why this was preferable.

This design choice goes hand-in-hand with D3's loot system, where like we're seeing random champions become more powerful than main bosses we're seeing Rares and Magics outshine Legendaries
The stats and affixes on all items are randomly generated, which means that some items will have more ideal stats than others. That said, an ideal rare is always going to be better than an ideal item of lower quality at the same item level. I think that players are seeing magic items that have higher ideal stats than a random rare (or a rare of lower level), but having more affix slots means that those rares have higher potential.

A good example: you might have a normal item with a couple of very high base attribute affixes, which is great. An ideal rare might have those same high base attributes, but also have magic find, plus crit, chance to blind, +% damage to a class ability, etc. (Blue Tracker / Official Forums)


  • To post a comment, please or register a new account.
Posts Quoted:
Clear All Quotes