Is online privacy an unreasonable expectation?