https://us.battle.net/d3/en/forum/topic/5149539239#4

"an exploit was discovered by duplicating a session ID
basically, if you join a public game with people, they can view your session ID and spoof it to login as you without need for a password or email or anyting
if you play with people, try not to play in public games bro, only with people you know"

This post has been edited by dishwasher: May 22 2012, 10:29 AM