Identity theft, social security numbers, and the Web