Fundamental Limits on the Anonymity Provided by the MIX Technique