And what does the Ad agencies got to do with this NSA mess? Or in other words, is there any disclosure in this article of any Ad agency doing NSA's job?
If you can monitor a meaningful fraction of traffic, then you can use an advertising agency's cookies to track a target.
Or really, any session cookie that is transmitted along with a normal HTTP request. Doesn't have to be just an ad agency's.