Researchers found a way to unmask Strava users' hidden locations