A practical attack to de-anonymize social network users