Offensive, Defensive, and Forensic Techniques for Determining Web User Identity