You guys do realize that in order for a hacker to grab any credit card details they will need to make a unique custom firmware and make you install it on your PS3 then go on PSN and buy something. Highly unlikely to happen. If you are worried just stick to OFW.
Also most of what these 'hackers' say is BS, e.g. He claims that Sony knows what controllers you're using, what USB devices are plugged in, what sort of television you're using everything.
That fact alone is untrue, a tv cannot send its make or model down scart or HDMI. It's impossible.
Not true, HDMI has a built in ability to communicate with other equipment. Each manufacturer have their own name for the technology Sony calls it BRAVIA. The BRAVIA Sync function allows devices to communicate with other Sony equipment supporting the Control for HDMI function.
It only stands to reason that if the two devices can interact then the TV and PS3 can identify each other for compatibility.
First of all, yes it does log the unique device descriptors every USB device has (used to identify a product for drivers in a PC). Use charles and have a poke yourself. Your TV can and does identify itself via HDMI (only HDMI though) thats how the PS3 knows it's capabilities (vRes and audio types) again watch your packet flow and try it for yourself.