Here is the PDF - http://ps3crunch.com/wp-content/uploads/2011/02/psn.pdf http://ps3crunch.com/wp-content/uploads/2011/02/psn.pdf You'll notice this: "Even if

Here is the PDF - http://ps3crunch.com/wp-content/uploads/2011/02/psn.pdf http://ps3crunch.com/wp-content/uploads/2011/02/psn.pdf You'll notice this: "Even if a connection is SSL encrypted, companies are aware of the big risk behind custom CA files and it's possibilitie" So AFAIK, Sony uses SSL but these guys think it's not enough. So headline and original article is exaggeration. Again from PDF "SONY is only relying on it's https connection. With all those CFWs spreading around, this is not secure anymore." - Which is total BS. If you are downloading a custom firmware that's not Sony's problem go blame firmware developer and yourself for running something on your system from an untrusted source. So looks like collecting information is the truth (as expected) and rest of the article is just baseless accusation.