Wow, wild news today. M&Ms vending machines have cameras in them and secretly run facial recognition on people.

We only know about it because shoddy programming exposed an error message that tipped off someone who happened to be walking by.
https://arstechnica.com/tech-policy/2024/02/vending-machine-error-reveals-secret-face-image-database-of-college-students/

I feel like this could be the plot of a dystopian movie.

I find it amusing when sysadmins see attempted attacks and conclude that instead of ignoring failed attacks, or blocking the attempts, that the right thing to do is block all Tor users.

Except that it's not amusing. It's sad. Both for the users who want privacy, and for the industry in that this is considered not only acceptable, but is the go-to "solution"... as if attackers couldn't use a non-Tor IP to launch attacks (e.g., from VPNs, botnets, proxies, reflected from other servers...)