Researchers have found a way to use the web\u2019s basic functions to identify who visits a site\u2014without the user detecting the hack.