writing
Reporting and essays, mostly about what systems are allowed to remember. Some of it lives here; the long-form reporting is published on the company's own pages, where the sources sit alongside it.
4 pieces
YouTube · CounterSigned
11 October 2026
5:44
After Pathao confirmed that attackers took users' names, email addresses and phone numbers, we asked how well five of Bangladesh's most used apps — bKash, Nagad, Pathao, Uber and Daraz — can keep your data out of the wrong hands. Of 25 ratings, one is strong, seven are adequate, fifteen are weak and two are poor.
YouTube · CounterSigned
7 October 2026
5:33
After the February 2026 election, Bangladesh's voter list was sold on Facebook for Tk 250, about two dollars. This film traces ten years of breaches, the four failures behind them, and what you can do this week.
Privacy
9 August 2026
5 min
My NID number, my phone number, my parents' names are for sale for a few hundred taka. So are yours. What changed in how I live after spending a month reading a decade of Bangladeshi data breaches.
Archives
9 August 2026
7 min
I pointed a crawler at eight Facebook posts from the July uprising and got back eight identical login walls with no text in them. Most of what I now believe about building systems that keep things came out of that afternoon.
Every figure in these pieces is sourced to published reporting, and the source list sits at the foot of each one.
