The difference between Amazon and gym subscriptions is that Amazon can easily make more money by upselling to happy customers than it can by screwing individuals or small businesses out of relatively small amounts of money for their accidental usage.

This is unlikely. The big cloud providers routinely cancel bills based on accidental usage. The real explanation is just that it's technically difficult to calculate all usage in real time and shut down systems immediately as soon as a certain cap is reached.

A vulnerability can be found in a hash algorithm at any time, whereas changing git's hashing algorithm is inevitably a slow process. IMO, if you want to ensure that someone gets an exact set of files, zip it up and sign the archive with the algorithm of your choice. It's not necessarily going to be practical to change git's signing algorithm every time a security issue is found.

Sunak himself certainly didn't present as a dyed in the wool wokist in the lead up to his permiership:

> Whether it’s pulling down statues of historic figures, replacing the school curriculum with anti-British propaganda or rewriting the English language so we can’t even use words like ‘man’, ‘woman’ or ‘mother’ without being told we’re offending someone [... etc. etc.]

https://www.theguardian.com/politics/2022/jul/29/rishi-sunak...

Who hasn't?

> and regulators

Good! (I wonder why?)

This is quite different from the claim that Coutts, of all organisations, was in hoc to 'woke leftists' while the country was under a Conservative government.

The notion that banking, of all industries, has been taken over by woke leftists (please supply your own scare quotes for the first of those appellations – I give up) is for the birds. As for the establishment, your own take on this is inconsistent, first saying that the establishment is entirely homogenous and aligned against Farage, and then pointing out that the government of the day helped Farage to get his Coutts account back.

If you haven't added a replace directive to your go.mod, then you certainly haven't replaced all instances of the old URLs with updated ones.

Any tool that automatically assumes that a URL in a Go module import is 'trusted' is just a broken tool.

It is rather like extremist environmentalism (by which I mean actual extremism – not just acknowledging the reality of climate change, etc.). Whatever you do, it will never be enough to satisfy the hempen-socked.

That's the figure (slightly inflated) for arrests under both the Malicious Communications Act 1988 and Communications Act 2003. That's not reasonably described as arrests for 'social media etc.' It's quite likely the the majority of those arrests have nothing to do with content that people post on social media.