The chief executive of an Internet advertising start-up admitted that his firm could track peoples' activity on multiple Web sites without their express permission. NebuAd CEO Robert Dykes said at a House hearing that the Internet service providers with which his company partners send their customers letters 30 days before any tracking begins.