How Face Recognition Can Destroy Anonymity