What Do We Know and What Should We Do About Internet Privacy?