Spying On Surfing: Why We Need a "Do Not Track" List