Facebook recently paid me a bounty for pointing out a problem that enabled this type of pinpoint targeting accuracy on their ad platform despite a policy that greatly limited it. It's interesting that LinkedIn doesn't consider it a privacy problem. I noticed that you could create custom audiences for ads by simply using anyone's FB vanity URL and appending @facebook.com to target by email. So if the vanity url of the target was facebook.com/mark, then you could target an ad to that person by simply adding mark@facebook.com to a custom audience list. They have now fixed it, but this same thing the author did here could have also been done on FB until about 2 months ago (and can still be done, but now you need their actual email address to target them).