A new paper provides a technique to link transactions from the privacy-centric cryptocurrency. Should users be worried?