The Slow Firing of Robert Mueller[‘s Replacement]

On December 5, I suggested that Speaker Pelosi delay the full House vote on impeachment until early February. I intimated there were public reasons — the possibility of a ruling on the Don McGahn subpoena and superseding charges for Lev Parnas — I thought so and private ones. One of the ones I did not share was the Stone sentencing, which at that point was scheduled for February 6. Had Pelosi listened to me (!!!) and had events proceeded as scheduled, Stone would have been sentenced before the final vote on Trump’s impeachment.

But things didn’t work out that way. Not only didn’t Pelosi heed my suggestion (unsurprisingly), but two things happened in the interim.

First, Stone invented a bullshit reason for delay on December 19, the day after the full House voted on impeachment. The prosecutors who all resigned from the case yesterday objected to the delay, to no avail, which is how sentencing got scheduled for February 20 rather than the day after the Senate voted to acquit.

Then, on January 6, Trump nominated Jessie Liu, then the US Attorney for DC, to be Undersecretary for Terrorism and Financial Crimes, basically the person who oversees the process of tracking criminal flows of finance. She won’t get that position — her nomination was pulled yesterday in advance of a Thursday confirmation hearing. But her nomination gave Barr the excuse to install a trusted aide, Timothy Shea, at US Attorney for DC last Thursday, the day after the impeachment vote and in advance of the now-delayed Stone sentencing.

Liu, who is very conservative and a true Trump supporter, had been nominated for a more obvious promotion before. On March 5, Trump nominated her to be Associate Attorney General, the number 3 ranking person at DOJ. But then she pulled her nomination on March 28 because Senators objected to her views on choice.

But let’s go back, to late August 2018. Michael Cohen and Sam Patten had just pled guilty, and Cohen was trying to find a way to sort of cooperate. Rudy Giuliani was talking about how Robert Mueller would need to shut down his investigation starting on September 1, because of the election. I wrote a post noting that, while Randy Credico’s imminent grand jury appearance suggested Mueller might be close to finishing an indictment of Stone, they still had to wait for Andrew Miller’s testimony.

Even as a I wrote it, Jay Sekulow was reaching out to Jerome Corsi to include him in the Joint Defense Agreement.

During the entire election season, both Paul Manafort and Jerome Corsi were stalling, lying to prosecutors while reporting back to Trump what they were doing.

Then, the day after the election, Trump fired Jeff Sessions and installed Matt Whitaker. Whitaker, not Rosenstein, became the nominal supervisor of the Mueller investigation. Not long after, both Manafort and Corsi made their game clear. They hadn’t been cooperating, they had been stalling to get past the time when Trump could start the process of ending the Mueller investigation.

But Whitaker only reactively kept Mueller in check. After Michael Cohen’s December sentencing made it clear that Trump was an unindicted co-conspirator in a plot to cheat to win, Whitaker started policing any statement that implicated Trump. By the time Roger Stone was indicted on January 24, 2019 — after Trump’s plan to replace Whitaker with the expert in cover ups, Bill Barr — Mueller no longer noted when Trump was personally involved, as he was in Stone’s efforts to optimize the WikiLeaks releases.

But then, when Barr came in, everything started to shut down. Mueller moved ongoing prosecutions to other offices, largely to DC, under Jessie Liu’s supervision. As Barr came to understand where the investigation might head, he tried to promote Liu out of that position, only to have GOP ideology prevent it.

Barr successfully dampened the impeach of the Mueller Report, pretending that it didn’t provide clear basis for impeaching the President. It was immediately clear, when he did that, that Barr was spinning the Stone charges to minimize the damage on Trump. But Barr did not remove Mueller right away, and the Special Counsel remained up until literally the moment when he secured Andrew Miller’s testimony on May 29.

The next day, I noted the import of raising the stakes for Trump on any Roger Stone pardon, because Stone implicated him personally. That was more important, I argued, than impeaching Trump for past actions to try to fire Mueller, which Democrats were focused on with their attempt to obtain Don McGahn’s testimony.

Still, those ongoing investigations continued under Jessie Liu, and Stone inched along towards trial, even as Trump leveraged taxpayer dollars to try to establish an excuse to pardon Manafort (and, possibly, to pay off the debts Manafort incurred during the 2016 election). As Stone’s trial laid out evidence that the President was personally involved in optimizing the release of emails Russia had stolen from Trump’s opponent, attention was instead focused on impeachment, his more recent effort to cheat.

In Stone’s trial, he invented a new lie: both Randy Credico and Jerome Corsi had falsely led him to believe they had a tie to WikiLeaks. That didn’t help Stone avoid conviction: Stone was found guilty on all counts. But it gave Stone yet another cover story to avoid revealing what his ties to WikiLeaks actually were and what he did — probably with Trump’s assent — to get it. For some reason, prosecutors decided not to reveal what they were otherwise prepared to: what Stone had really done.

Immediately after his conviction, Stone spent the weekend lobbying for a pardon. His wife appeared on Tucker Carlson’s show and someone got inside White House gates to make the case.

But, as impeachment proceeded, nothing happened, as the Probation Office started collecting information to argue that Stone should go to prison for a long while. The day Democrats finished their case against Donald Trump, though, Bill Barr made his move, replacing Liu before she was confirmed, removing a very conservative Senate confirmed US Attorney to install his flunkie, Timothy Shea. But even that wasn’t enough. Prosecutors successfully convinced Shea that they should stick to the probation office guidelines recommending a stiff sentence. When Timothy Shea didn’t do what Barr expected him to, Barr intervened and very publicly ordered up the cover up he had promised.

Effectively, Bill Barr is micro-managing the DC US Attorney’s office now, overseeing the sentencing of the man who could explain just how involved Trump was in the effort to maximize the advantage Trump got from Russia’s interference in 2016, as well as all the other prosecutions that we don’t know about.

Trump has, finally, succeeded in firing the person who oversaw the investigations into his role in the Russian operation in 2016. Just as Stone was about to have reason to explain what that role was.

Timeline

August 21, 2018: Michael Cohen pleads guilty

August 31, 2018: Sam Patten pleads guilty

September 5, 2018: Jay Sekulow reaches out to Corsi lawyer to enter into Joint Defense Agreement

September 6, 2018: In first Mueller interview, Corsi lies

September 17, 2018: In second interview, Corsi invents story about how he learned of Podesta emails

September 21, 2018: In third interview, Corsi confesses to establishing a cover story about Podesta’s emails with Roger Stone starting on August 30, 2016; NYT publishes irresponsible story that almost leads to Rod Rosenstein’s firing

October 25, 2018: Rick Gates interviewed about the campaign knowledge of Podesta emails

October 26, 2018: Steve Bannon admits he spoke with Stone about WikiLeaks

October 31, 2018: Prosecutors probably show Corsi evidence proving he lied about source of knowledge on Podesta emails

November 1 and 2, 2018: Corsi continues to spew bullshit in interviews

November 6, 2018: Election day

November 7, 2018: Jeff Sessions is fired; Matt Whitaker named Acting Attorney General

November 9, 2018: Corsi appears before grand jury but gives a false story about how he learned of Podesta emails; Mueller threatens to charge him with perjury

November 15, 2018: Trump tweets bullshit about Corsi’s testimony being coerced

November 23, 2018: Corsi tells the world he is in plea negotiations

November 26, 2018: Corsi rejects plea

December 7, 2018: Trump nominates Bill Barr Attorney General

January 18, 2019: Steve Bannon testifies to the grand jury (and for the first time enters into a proffer)

January 24, 2019: Roger Stone indicted for covering up what really happened with WikiLeaks

February 14, 2019: Bill Barr confirmed as Attorney General

March 5, 2019: Jessie Liu nominated to AAG; Bill Barr briefed on Mueller investigation

March 22, 2019: Mueller announces the end of his investigation

March 24, 2019: Bill Barr releases totally misleading version of Mueller results, downplaying Stone role

March 28, 2019: Liu pulls her nomination from AAG

April 19, 2019: Mueller Report released with Stone details redacted

May 29, 2019: As Mueller gives final press conference, Andrew Miller testifies before grand jury

November 12, 2019: Prosecutors apparently change Stone trial strategy, withhold details of Stone’s actual back channel

November 15, 2019: Roger Stone convicted on all counts

January 6, 2020: Jessie Liu nominated to Treasury

January 16, 2020: Probation Office issues Presentence Report calling for 7-9 years

January 30, 2020: Bill Barr replaces Liu with Timothy Barr, effective February 3; DOJ submits objection to Presentence Report

February 3, 2020: Timothy Shea becomes acting US Attorney

February 5, 2020 : Senate votes to acquit Trump

February 6, 2020: Initial sentencing date for Roger Stone

February 10, 2020: Stone sentencing memoranda submitted

February 11, 2020: DOJ overrules DC on Stone sentencing memorandum, all four prosecutors resign from case

February 20, 2020: Current sentencing date for Roger Stone

Share this entry

The Very Limited Republican Concern about FISA

There are a number of FISA submissions made by the Trump Administration that the FISA Court has found problematic. They include:

March 24-27, 2017: FBI conducts queries on FISA data using identifiers for over 70,000 facilities associated with persons with access to FBI facilities and systems (noticed to the court on November 22, 2017)

April 7, 2017: Reauthorization of Carter Page FISA, signed by Jim Comey and Dana Boente, at a time when probable cause was thin and contrary evidence mounting

June 29, 2017: Reauthorization of Carter Page FISA, signed by Andrew McCabe and Rod Rosenstein, at a time when few believed the order was producing valuable intelligence and abundant contrary evidence was known

October 11, 2017: FBI conducts queries to identify cleared personnel on whom to serve process (noticed to the court on February 21, 2018)

November 22, 2017: FBI takes 8 months before notifying FISC of the March 2017 queries

December 1, 2017: FBI conducts over 6,800 queries using a group of social security numbers (noticed to the court on April 27, 2018)

December 7-11, 2017: FBI conducts queries on the identifiers of 1,600 people (noticed to the court on April 12, 2018)

Unknown date: FBI conducts queries of 57,000 identifiers (or individuals) that may not have been designed to return foreign intelligence information (noticed to the court on April 13, 2018)

February 5 and 23, 2018: FBI conducts 30 queries on potential sources (noticed to the court on June 7, 2018)

February 21, 2018: FBI conducts 45 queries on persons being considered as sources (noticed to the court on May 21, 2018)

March 27, 2018: Submission of FBI 702 querying procedures, accompanying an application that included a declaration from Christopher Wray, that fell far short of what Congress recently required

September 18, 2018: Submission of FBI 702 querying procedures that still fall short of standards mandated by Congress, including a supplemental declaration from Wray that relies, in part, on FBI’s “strong culture that places great emphasis on personnel consistently conveying true and accurate information”

Not only did both the Carter Page applications from which DOJ withdrew its probable cause claim come under the Trump Administration, but a slew of fairly alarming uses of FISA data happened under Trump as well. A bunch of them occurred under Chris Wray. Indeed, Chris Wray submitted a declaration to the FISC in September 2018 — long after there were questions about the Carter Page FISAs — suggesting the FBI shouldn’t have to write stuff down as it queries 702 data, in spite of what Congress required by law.

The Director anticipates that approach would divert resources from investigative work, delay assessment of threat information, and discourage its personnel from querying unminimized FISA information, to the detriment of public safety. Id. at 9-12. He also describes an alternative approach whereby personnel would be allowed to forgo such research and rely solely on their “personal knowledge” in making those assessments. Id. at 12. The Director expects that practice would “result in inconsistent and unreliable information in FBI systems,” id., thereby complicating other aspects of the FBI’s work – e.g., implementing its Section 702 targeting procedures. Id. at 13-14. The Director also expresses concern that such an approach would be inconsistent with the FBJ’s “strong culture that places great emphasis on personnel consistently conveying true and accurate information.” Id. at 14.

[snip]

The government further objects that requiring a written justification to examine the contents provided in response to U.S.-person queries of Section 702 information “would substantially hinder the FBI’s ability to investigate and protect against threats to national security.” Supplemental FBI Declaration at 17. Different fo1ms of hindrance are claimed.

[snip]

[At the heart of the government’s objections to the documentation requirement proposed by amici is an understandable desire to ensure that FBI personnel can] perform their work with the utmost efficiency and “connect dots” in an effort to protect the national security. Given the lessons learned following 9/11 and the Fort Hood shooting, as well as the FBI’s significant reliance on queries to effectively and efficiently identify threat streams in its holdings, the FBI is extremely concerned about anything that would impede, delay, or create a disincentive to querying FBI databases. Supplemental FBI Declaration at 7 (emphasis added).

Yet in spite of the fact that Chris Wray, himself, participated in a 18-month effort to ignore the will of Congress with respect to 702 queries, no one raised that in yesterday’s oversight hearing. Not to mention the GOP got plenty of facts wrong, such as treating FISA as a terrorism thing, and not, increasingly, the very same counterintelligence purpose used with Page.

To be sure, aside from some comments acknowledging that IG Report, Democrats weren’t raising any questions about FISA (though Jerry Nadler did thank Jim Sensenbrenner for agreeing to delay consideration of Section 215 reauthorization to allow for consideration of the IG Report).

Here’s the thing, though: The FISA Court has complained about FBI surveillance practices all occurring under Trump affecting up to 135,476 Americans.

And Republicans claiming to give a goddamn about FISA are really just concerned about one of those Americans.

Which is a pretty good indication they’re not really concerned about the surveillance at all.

Share this entry

“What is the root user?” Joshua Schulte Set Up the Shared “root” Password He’ll Use in His Defense

In a full day of testimony yesterday, one of Joshua Schulte’s former colleagues, testifying under the name Jeremy Weber (which may be a pseudonym of a pseudonym under the protective order imposed for the trial) introduced a ton of detail about how the engineering group he and Schulte worked in was set up bureaucratically, how the servers were set up, and how relations between Schulte and the rest of the group started to go south in the months and weeks leading up to the date when, the government alleges, he stole CIA’s hacking tools. He also described how devastating the leak was for the CIA.

In that testimony, the government began to lay out their theory of the case: When Schulte lost SysAdmin access to the servers hosting the malware they were working on — and the same day the unit announced they’d soon be moving the last server to which Schulte had administrator privileges under the official SysAdmin group — Schulte went back to the back-up file of the server from the day the fight started blowing up, March 3, 2016, and made a copy of it.

But the government also started previewing what will likely be Schulte’s defense: that some of these servers were available via a shared root password accessible to anyone in their group.

Prosecutor Matthew LaRoche walked Weber through a description of how a “root” user for the ESXi server was used.

Q. What is the root user?

A. The root user, in this situation, “root” was kind of Linux term for the administrative account on the machine, like the default administrator account.

Q. You also mentioned there was a password for the ESXi server?

A. That’s correct.

Q. Was that password stored anywhere?

A. Yes, it was.

Q. Where?

A. It was stored on OSB’s passwords page for some of our services.

Q. What do you mean by OSB’s passwords page?

A. OSB had a lot of virtual machines outside of the Atlassian products that had passwords on them solely because the technology required to have a password and not for security practices, so that — these were often like test machines, and these passwords we kept on a page so that if somebody was leveraging that VM they would have the credentials they needed to log in to it.

Q. Where was that passwords page located?

A. Confluence.

Q. Was it restricted in any way?

A. It was.

Q. How?

A. It was to OSB.

This detail has been public since WikiLeaks first published the documents. I pointed it out here:

Among the pages that got exposed in this week’s Wikileaks dumps of CIA’s hacking tools was a page of Operational Support Branch passwords. For some time the page showed the root password for the network they used for development purposes.

These passwords, as well as one (“password”) for another part of their server, were available on the network site as well.

Throughout the period of updates, it included a meme joking about setting your password to Incorrect.

[snip]

A discussion ensued about what a bad security practice this was.

2015-01-30 14:30 [User #14588054]:

Am I the only one who looked at this page and thought, “I wonder if security would have a heart attack if they saw this.”?

2015-01-30 14:50 [User #7995631]:

Its locked down to the OSB group… idk if that helps.

2015-01-30 15:10 [User #14588054]:

I noticed, but I still cringed when I first saw the page.

I have no idea whether these passwords exacerbated CIA’s exposure. The early 2015 discussion happened well before — at least as we currently understand it — the compromise that led to Wikileaks’ obtaining the files.

It turns out that Schulte himself moved this password onto the ESXi passwords page on or before March 31, 2015, almost a year before he allegedly stole the files.

MR. LAROCHE: Ms. Hurst, can you please publish Government Exhibit 1003, and please just zoom in on the top of the email, the to-from.

Q. Is this another email from the CIA, Mr. Weber?

A. Yes, it is.

Q. When was this email sent?

A. It was sent on March 31, 2015, at 8:20 p.m.

Q. Who sent it?

A. It was sent by Josh Schulte.

Q. Who was it sent to?

A. It was sent to the OSB email group.

Q. How do you know that?

A. The string NCS-IOC-EDG-AED-OSB is a user group and it’s explicit in its naming. NCS was in the org chart above IOC, the rest of those are the groups that we have previously talked about.

Q. It’s a lot of acronyms.

A. It is.

Q. Below that, what’s the subject line?

A. OSB.DevLAN.net VM credentials.

Q. What’s OSB.DevLAN.net?

A. That was the OSB ESXi server.

MR. LAROCHE: Ms. Hurst, if you could please zoom out and then on to the text of the email.

Q. Can you read the first sentence, please?

A. “I’ve modified the OSB’s ESXi server page to contain the passwords and other information directly instead of through the OSB’s passwords page; also updated the permissions to be restricted to everyone outside of OSB.”

Q. Do you understand what he’s referring to by OSB’s ESXi server page?

A. Yes.

Q. What’s he referring to?

A. It was a second page created later to contain information specifically to the ESXi server and the administration of that.

Q. And do you understand what he means by updated the permissions to be restricted to everyone outside of OSB?

A. This was him saying that only people within the OSB — within OSB would have access to read this page.

Q. Now, is this the same ESXi server that as of 2015 was running Confluence and Bamboo?

A. Yes, it was.

I think this is what that page would have looked like, in part, in the March 3, 2016 files, with the same root password set to “mysweetsummer:”

Schulte will eventually argue that he not only recognized that this arrangement — which he set up, per this email — was insecure, but that he warned people about it repeatedly. Weber says that didn’t happen, because if Schulte had complained, he would have told Schulte to fix it.

Q. Are you sure that the defendant never made any complaints that DevLAN was vulnerable to theft?

A. Yes.

Q. Why?

MS. SHROFF: Objection.

THE COURT: Overruled.

A. If he had complained to me about the Atlassian products being vulnerable to theft, I would have told him to fix it. The Atlassian products were our responsibility, and if he had highlighted an issue with that, I would have made it our primary focus to fix that.

The government has already begun showing forensics suggesting the files were stolen via other means.

More importantly, they showed that if Schulte thought the shared root password was insecure, he’s got no one but himself to blame for it.

It’s certainly possible he will point to things he’ll argue are proof that he raised concerns about this arrangement — rather than just joking about it on the development pages (it won’t take too long before we learn which numbered ID WikiLeaks used for Schulte). But there’s already evidence that he’s the one who set it up that way.

Calyx Institute has generously sprung for Schulte transcripts. If you’d like to support the effort, you can make a tax deductible donation to them here.

Share this entry

Mike Flynn Seizes the Rope to Hang Himself With: Pick Your Perjury

As I noted Wednesday, Mike Flynn’s legal team and the government submitted a bunch of filings.

In this post, I suggested (controversially) that prosecutors may have had a different purpose for raising probation in their reply to Flynn’s sentencing memo, to remind Judge Emmet Sullivan how pissed he gets when powerful people demand special treatment that the little people go to prison for. In this post, I suggested that Flynn’s motion to dismiss would be better suited if Sidney Powell were representing Carter Page, not Flynn.

In this post, I’ll cover the meat of the issue, Flynn’s attempt to withdraw his guilty plea, made twice, under oath.

Before I get into that meat, though, note that with a sworn declaration Flynn submitted with this filing, he has given four sworn statements in this matter:

  • December 1, 2017: Mike Flynn pled guilty before Judge Rudolph Contreras to lying in a January 24, 2017 FBI interview.
  • December 18, 2018: Mike Flynn reallocuted his guilty plea before Judge Emmet Sullivan to lying in a January 24, 2017 FBI interview.
  • June 26, 2018: Mike Flynn testified to an EDVA grand jury, among other things, that “from the beginning,” his 2016 consulting project “was always on behalf of elements within the Turkish government,” he and Bijan Kian would “always talk about Gulen as sort of a sharp point” in relations between Turkey and the US as part of the project (though there was some discussion about business climate), and he and his partner “didn’t have any conversations about” a November 8, 2016 op-ed published under his name until “Bijan [] sent me a draft of it a couple of days prior, maybe about a week prior.” The statements conflict with a FARA filing submitted under Flynn’s name.
  • January 29, 2020: Mike Flynn declared, under oath that, “in truth, I never lied.”

Understand that from the moment Judge Emmet Sullivan picks up this motion to withdraw his plea, Sullivan will be faced with Flynn claiming he lied, at least once, under oath. Take your pick which one of these statements under oath Flynn now claims to be a lie, but at least one of them necessarily is. And Sullivan has made it clear he plans to put Flynn back under oath to resolve all this.

That’s the hole that Sidney Powell has crafted for her client to dig his way out of, a sworn statement that conflicts with two earlier ones, and sworn testimony that conflicts with her primary basis for withdrawing this plea.

Almost no mention of his lies about Russia

From there, she provides her client little help from the primary task before him: explaining why he is withdrawing his guilty plea that primarily relates to his January 24, 2017 FBI interview. In the first paragraph of her motion, she asserts that Mike Flynn does maintain he did not lie on January 24, 2017, meaning he lied under oath before both Contreras and Sullivan when he said he did.

Michael T. Flynn (“Mr. Flynn”) does maintain that he is innocent of the 18 U.S.C. §1001 charges; and he did not lie to the FBI agents who interviewed him in the White House on January 24, 2017.

She offers several different explanations for why her client apparently perjured himself twice before judges. The most sustained one — one Flynn fans have made persistently — is that he now thinks the agents didn’t actually believe he lied because they “saw no indications of deception” from Flynn, meaning that he didn’t act like he was lying. Bizarrely, one of the things Flynn includes in his sworn declaration is that he has a history of not being candid about sensitive and classified subjects with anyone who is not his superior (though I would imagine that his former superior James Clapper would argue even this is not true).

My baseline reaction to questions posed by people outside of my superiors, immediate command, or office of responsibility is to protect sensitive or classified information, except upon “need to know” and the proper level of security clearance. That type of filter is ingrained in me and virtually automatic after a lifetime of honoring my duty to protect the most important national and military secrets.

In short, Flynn claims under oath that he has a habit of not telling the truth about classified or sensitive matters. He doesn’t quite say that’s what happened here, but since he has stated under oath he knew that it was a crime to lie to the FBI and he knew the people interviewing him would have had access to transcripts of his calls with Sergei Kislyak, has has provided evidence, under oath, that he knew these FBI agents were people he had to tell the truth to and were included among those with the “need to know” about what he said to Kislyak. But the explanation that he has a virtually automatic filter that leads him not to tell the truth about sensitive information does explain why agents might observe that he had a sure demeanor even while knowing he lied: Flynn has had a lot of practice lying.

Now, this by itself surely can’t get him out of his conflicting sworn statements that he didn’t lie but he did.

So Flynn blames his former lawyers.

As part of a broader strategy to claim that Flynn’s Covington team was incompetent, Sidney Powell claims (relying on Flynn’s declaration) that when the government made it clear to his lawyers they knew he had been lying, Flynn asked his lawyers “to make further inquiry with the SCO prosecutors about whether the FBI agents believed I had lied to them” (Flynn’s declaration is internally contradictory on this point, because he claims he heard rumors they didn’t believe this by November 30 but then, seven paragraphs later, he claims he never heard those rumors before he pled guilty on December 1). His attorney inquired and came back with the truthful response that the “agents stand by their statements.” Flynn claims that his attorneys did not tell him what he claims to be a critical detail, that the agents thought he sounded like he was telling the truth even though abundant other evidence (including Peter Strzok’s texts to Lisa Page, written before any draft 302s) make it clear they knew he was lying.

The information that counsel withheld concerned prior statements that the two FBI agents who interviewed Mr. Flynn in the White House had made about his “sure demeanor,” the lack of “indicators of deception,” and similar observations. Exs. Michael Flynn Declaration;Lori Flynn Declaration.

In an earlier round of briefing in this case, the government represented that it had communicated this information to the defendant on the day that the plea agreement was signed, November 30, 2017 [Gov’t’s Opp’n, ECF No. 122 at 16]. In its December 16, 2019 Opinion, moreover, this Court accepted and relied on that representation [Memorandum Opinion, ECF No. 144 at 32].As the Flynn Declarations demonstrate, however, that representation was mistaken: the government almost certainly made a disclosure to the defendant’s counsel on that day, but Covington did not then communicate the information to the defendant himself. Of course, in the vast majority of cases, communication to counsel is communication to the client, but it was not that day.

Flynn now claims it would have changed his mind to plead guilty if he learned that the FBI agents thought he was a pretty convincing liar, but his lawyers incompetently didn’t share that detail with him.

But wait.

There’s more.

Powell also suggests that the way the FBI investigated Flynn — first by monitoring how he responded to Trump’s first national security briefing (the one Flynn attended while secretly signing up to work for the Turkish government) and then by interviewing him in the White House — is proof they weren’t really investigating him.

Meanwhile, on January 24, 2017, as we have briefed elsewhere, FBI Director Comey and Deputy Director McCabe dispatched Agents Strzok and “SSA 1” to the White House— deliberately contrary to DOJ and FBI policy and protocols—without notifying DOJ.9

9 This was actually the FBI’s second surreptitious interview of Mr. Flynn—without informing him even so much as that he was the subject of their investigation. SSA 1 had “interviewed him” in a “sample Presidential Daily Briefing” (“PDB”) on August 17, 2016—unbeknownst to anyone outside the FBI or DOJ until revealed in the recent Inspector General Report of December 9, 2019.

This also goes to Mr. Flynn’s claim of actual innocence. Against the baseline interview the FBI surreptitiously obtained under the guise of the PDB (in August 2016), the agents conducted the White House interview and immediately reported back in three extensive briefings during which both agents assured the leadership of the DOJ and FBI they “saw no indications of deception,” and they believed so strongly that Mr. Flynn was shooting straight with them that Strzok pushed back against Lisa Page’s disbelief and Deputy Director McCabe’s cries of “bullshit.” ECF No. 133-2 at 4. This development is addressed in Flynn’s Motion to Dismiss for Egregious Government Misconduct filed contemporaneously herewith.

[snip]

The electronic communication written by SSA 1 arising from the presidential briefing was approved by Strzok. It was uploaded into Sentinel August 30, 2016. IG Report at 343 and n. 479. In truth, but unknown to Mr. Flynn until the release of this Report, SSA1 was actually there because he was investigating the candidate’s national security advisor as being “an agent of Russia.” This report of that interaction including purported statements by Mr. Flynn was put it in a sub-file of the Crossfire Hurricane file. That, and the DOJ document completely exonerating Mr. Flynn of that slanderous assertion, has never been produced to Mr. Flynn. This was extraordinary Brady and Giglio information that should have been provided to Mr. Flynn by Mr. Van Grack no later than upon entry of this Court’s Brady order

[snip]

With every disclosure and IG Report of the last eighteen months, it has become increasingly clear the FBI was not trying to learn facts from Mr. Flynn on January 24, 2017. Rather, the Agents were executing a well-planned, high-level trap that began at least as far back as August 15, 2016, when Strzok and Page texted about the “insurance policy” they discussed in McCabe’s office, opened the “investigation” on Mr. Flynn the next day, and inserted SSA 1 surreptitiously into the “sample PDB” the next day to investigate and assess Mr. Flynn.

Even if these assertions were true, none of it rebuts that Flynn told lies in that interview.

Which is probably why Powell goes on to argue that the answers that Flynn claims weren’t lies weren’t material to the FBI investigation, based in part on Judge Sullivan’s comments from the December 2018 sentencing hearing that probably were more indication that he wanted prosecutors to lay out how bad Flynn’s lies were.

Finally, the Court was not satisfied with the factual basis for the plea. It said it had “many, many, many questions.” Hr’g Tr. Dec. 18, 2018 at 20. The Court, sensing the materiality issues in the case, specifically left those questions open for another day. Id. at 50. 40

40 The element of materiality boils down to whether a misstatement “has a natural tendency to influence, or was capable of influencing, the decision of the decision-making body to which it was addressed.” United States v. Gaudin, 515 U.S. 506, 522-23 (1995). In applying this rule, courts analyze the statement that was made and the decision that the agency was considering. Universal Health Services, Inc. v. U.S. ex rel. Escobar, 136 S. Ct. 1989, 2002-03 (2016). For a misstatement to be material, the agency must show that it would have made a different decision had the defendant told the truth.

The government alleges misstatements that were not material because the FBI agents did not come to the White House for a legitimate investigative purpose; they did not come to investigate an alleged crime. Instead, they came to get leverage over Mr. Flynn at a time when they felt the new administration was still disorganized. So they ignored policies and procedures. They went around the Department of Justice and the White House Counsel’s office, and they walked into the National Security Advisor’s office under false pretenses. They decided not to confront Mr. Flynn with any alleged misstatement not for a legitimate law enforcement purpose, but rather because they did not know if the effort to purge him from his office would be successful. If it was not, they wanted to maintain a collegial working relationship with him. If Mr. Flynn had answered the questions the way in which they imagine he should, nothing at all would have changed in the actions the FBI would have taken.

Powell, of course, presents no evidence for these wild claims. Moreover, she ignores the evidence of materiality that prosecutors submitted in their own sentencing memo.

The topic of sanctions went to the heart of the FBI’s counterintelligence investigation. Any effort to undermine those sanctions could have been evidence of links or coordination between the Trump Campaign and Russia.

She ignores, too, that prosecutors put her on notice that they’re going to show that Flynn continued to lack candor in his first meetings with Mueller’s team, a team that did not include either of the FBI agents she says had it in for her client.

Based on filings and assertions made by the defendant’s new counsel, the government anticipates that the defendant’s cooperation and candor with the government will be contested issues for the Court to consider at sentencing. Accordingly, the government will provide the defendant with the reports of his post-January 24, 2017 interviews. The government notes that the defendant had counsel present at all such interviews.

Flynn’s declaration actually accords with this. He describes how, after his first interview with Mueller’s prosecutors, “my attorneys told me that the first day’s proffer did not go well.” It wasn’t until several more meetings before Mueller’s team gave Flynn’s attorneys his first 302, which made it clear how dramatically he had lied.

All of which is to say that Powell’s most robust support for Flynn’s claim that he didn’t lie is that FBI agents believed he had lied well, which probably isn’t going to convince Sullivan to let him withdraw his sworn plea that he did in fact lie.

Cursory consideration of Cray

That makes it all the more problematic that Powell barely addresses what Judge Sullivan told both sides to: a hearing with sworn witnesses and to address US v Cray. True, she does say that if the government doesn’t agree with this motion Sullivan should maybe hold a hearing.

No hard and fast rule governs whether an evidentiary hearing is required before a court can properly adjudicate ineffective assistance of counsel claims, including those undergirding a motion to withdraw a guilty plea. Much depends on exactly what is being contested and what materials the court will have to consider in deciding the merits. In Taylor, 139 F.3d at 932-33, this Circuit wrote:

Ordinarily, when a defendant seeks to withdraw a guilty plea on the basis of ineffective assistance of trial counsel the district court should hold an evidentiary hearing to determine the merits of the defendant’s claims. . . . On the other hand, some claims of ineffective assistance of counsel can be resolved on the basis of the trial transcripts and pleadings alone.3

But she doesn’t commit to putting her client (and his former attorney) under oath, which is where this is heading.

And her briefing on Cray is cursory. She deals with the standard under which that defendant tried to withdraw his plea.

United States v. Cray, 47 F.3d 1203 (D.C. Cir. 1995), which this Court requested counsel address, denied withdrawal of a guilty plea because there was no violation of Rule 11. As more recent circuit decisions hold, Rule 11 violation is only one of the reasons that warrants granting a motion to withdraw a plea. Here, Sixth Amendment violations taint Mr. Flynn’s plea, and it cannot stand.38 United States v. McCoy, 215 F.3d 102, 107 (D.C. Cir. 2000) (“A plea based upon advice of counsel that ‘falls below the level of reasonable competence such that the defendant does not receive effective assistance’ is neither voluntary nor intelligent.”) (internal citation omitted).

Moreover, she claims there was a Rule 11 violation in the reallocution before Judge Sullivan, because he didn’t ask Flynn whether there were other promises to induce him to plead.

That plea colloquy did not, however, inquire into whether any undisclosed promises or threats induced the plea agreement. Moreover, the Court specifically expressed its dissatisfaction with the underlying facts supposedly supporting the factual basis for the plea. United States v. Cray, 47 F.3d 1203, 1207 (D.C. Cir. 1995) (“Where the defendant has shown his plea was taken in violation of Rule 11, we have never hesitated to correct the error.)”

But Judge Contreras did allocute to that (in addition to making Flynn attest that he was happy with the advice Rob Kelner gave him).

THE COURT: Have any threats or promises other than the promises made in the plea agreement been made to you to induce you to give up your right to the indictment?

THE DEFENDANT: No.

Flynn now claims that he pled to ensure Mueller would not prosecute his failson, but he didn’t raise it on December 1, 2017 when asked if there any more promises made to him.

Moreover, Powell does not address another part of Cray: that when the judge put him under oath, he revealed that his claims of innocence related to other charges, something Flynn is doing here.

Powell claims Covington did not give Flynn notice of their conflict but provides evidence they did

Rather than making a robust case that Flynn did not commit the crime that he pled guilty to, lying about Russia, she instead argues that Covington was fatally conflicted when they advised Flynn to plead guilty. She argues that Flynn told the entire truth to his Covington attorneys while they were preparing his FARA filing, they didn’t include the information he had provided them, and so they made him plead guilty to get out of trouble they had created themselves.

Before I explain the problems with this, recall that I raised questions about a conflict immediately after the December 2018 sentencing hearing. So I’m actually sympathetic to the argument.

But there are two problems with her argument.

First, she’s obscuring the nature of the lies in Flynn’s FARA filing in an effort to pretend that Flynn did not lie to Covington when preparing the filing. I debunked some of her claims here, but one bears repeating. Flynn’s statement of offense described one of the false statements on the filing as “an op-ed by FLYNN published in The Hill on November 8, 2016 was  written at his own initiative.” Powell pretends this is a dispute over whether Flynn actually wrote the op-ed himself. Flynn did tell Covington, truthfully, that Kian had drafted the op-ed, which Powell notes repeatedly.

But Covington’s notes also show that Flynn told Covington the op-ed had nothing to do with the Turkish contract, and that he did it solely to prove that the Trump campaign was serious about fighting Islamic terrorism.

That is, he not only lied about whether it was his idea to write it, but lied about it being the deliverable for the Turkish contact altogether. As noted above, Flynn testified under oath he didn’t even know this op-ed was coming until Kian delivered it in full draft form to him. And, as DOJ has already made clear, Covington’s lawyers will testify that Flynn didn’t tell them the truth about the op-ed, as this interview report from Rob Kelner makes clear.

(U//FOUO) KELNER was informed by FLYNN the published 11/8/2016 Op-Ed article in The Hill was something he, FLYNN, had wanted to do out of his own interest. FLYNN wanted to show how Russia was attempting to create a wedge between Turkey and the United States. FLYNN informed KELNER the Op-Ed was not on behalf of FIG’s project with INOVO.

So the public record — including notes released by Powell — shows that Flynn (and Kian) were responsible for the false statements in the FARA filing, not Covington.

Moreover, documents submitted by Powell on Wednesday make it clear Covington informed Flynn of the conflict. Flynn (and his wife, who submitted a declaration that now makes it possible for prosecutors to breach spousal privilege) suggests he was only informed of the conflict twice — once in August and once in November after his first proffers. He describes the August advice as a 15-minute conversation he had after pulling over on the side of a road.

The call then occurred while we were driving to have dinner with some friends. It was an approximately 15-minute phone call, where we had pulled off to the side of a highway. They informed us that there was a development regarding a conflict of interest. They also mentioned the possibility of Bijan being indicted. Speaking to the conflict of interest, they stated that they were prepared to defend as vigorously, if the conflict became an issue. We told them we trusted them.

The government has, in the past, noted they raised a potential conflict with Covington twice, on November 1 and November 16, before they ever spoke with Flynn. An exhibit Powell included Wednesday shows that on November 20, 2017, Flynn responded to a Covington email stating the description of the conflict “is very clearly stated” but that “we’re good going forward with you all and very much trust that you will continue to guide us through this difficult time.” The email reflected at least three warnings from Covington:

  • August 30, where they informed him of the conflict and suggested he “obtain advice from a lawyer independent of Covington”
  • A later conversation where they suggested the name of another lawyer with expertise in legal ethics who had already determined he had no conflict who was “willing to be engaged by you for a reduced, fixed fee”
  • The warning on November 19, which for the third time advised him to “seek advice from an independent lawyer about this”

Flynn did not contest their representation of those (at least) three warnings. Powell now claims they cited the wrong rule of professional conduct — about the only claim in the filing that might have merit. And — in a passage denying their (at least) third warning to Flynn — she also suggests that the Covington lawyers faced criminal liability themselves for repeating what their client told them.

What had begun as a simple mistake in doing the FARA filing suddenly had the potential of exposing the Covington lawyers to civil or criminal liability, significant headlines, and reputational risk. That the Covington lawyers thought that a “drive-by” cell-phone chat, while their client was on his way to dinner with his wife, was sufficient disclosure in these dire circumstances revealed their cavalier attitude and presaged far worse. [emphasis original]

She doesn’t note, of course, that Covington’s possible exposure on FARA, and the ability of the government to get them to testify, remained the same whether or not they remained Flynn’s lawyer.

And all that’s before Covington starts producing other records that are less complimentary to Flynn.

Remember: A key part of Sidney Powell’s argument here is that Covington — the lawyers who advised Flynn that if he withdrew his plea in December 2018 he’d only be giving Judge Sullivan more rope to hang himself with — provided obviously incompetent legal advice.

Be careful what you wish for

Way back when Flynn first got cute in advance of his December 2018 sentencing, I warned him, be careful what you wish for. Raising the circumstances of his FBI interview was likely, I predicted, to get Sullivan to ask for those details.

Which he subsequently did, resulting in damning new information about Flynn’s lies to be released.

I feel like that’s bound to happen here. For example, Powell keeps complaining that DOJ won’t provide her Flynn’s DIA briefings regarding his trips to Russia. She has raised what happened in Flynn’s proffers, but not provided the 302s which even Flynn’s declaration suggests was a disaster. The government has already telegraphed they may release this stuff.

There’s even the possibility that if Judge Sullivan asks to have witnesses, DOJ will ask that Don McGahn, John Eisenberg, or Reince Priebus testify. According to the Mueller Report, they all believed he was lying to them about what he remembered he had said to Kislyak.

So in addition to not heeding the advice about giving a judge more rope to hang you with, I feel like someone should have warned Flynn to be careful of what he wishes for. Again.

A number of people have pointed to Bill Barr’s sudden installation of a loyal aide at DC US Attorney and assumed it means the fix is in for the Flynn sentencing.

Attorney General William P. Barr on Thursday named former federal prosecutor Timothy Shea as the District’s interim U.S. attorney.

Shea, 59, currently serves as a counselor to Barr at the Justice Department. He will oversee the nation’s largest U.S. attorney’s office with 300 prosecutors.

The announcement comes just a day before Jessie K. Liu, the city’s current U.S. attorney, leaves office on Friday.

Liu, 47, has served in the post for a little over two years. President Trump on Jan. 6 nominated her to become the Treasury Department’s undersecretary for terrorism and financial crimes, and her nomination is pending before the Senate Banking Committee.

I absolutely don’t discount the possibility that Barr did this to better retaliate against Andrew McCabe and shut down the remaining investigations of Trump’s aides being conducted by the DC US Attorney’s office. As I may get around to showing, I think the risk is particularly acute for Roger Stone’s sentencing, where Trump has far more untapped exposure than Flynn. And it may well be the case that Barr and Shea force prosecutors to submit a half-hearted response to this motion to withdraw (though some of them are actually NSD attorneys who report up through other channels).

But at this point, the damage has already been done. There is no way to change the fact that Flynn has sworn to statements, under oath, before Judge Sullivan that materially conflict.

Share this entry

SDNY Prosecutors Protect Trump’s Privacy to Enter into a Joint Defense Agreement with the Russian Mob

Whooboy is there an interesting flurry of motions over in the Ukrainian grifter prosecution. Effectively, SDNY prosecutors and (two of) Lev Parnas’ co-defendants want to slow him from sharing information with HPSCI. The letters include:

  • January 17: Parnas asks to modify the protective order a third time
  • January 22: Igor Fruman lawyer Todd Blanche says he has an attorney-client interest in some of what Parnas wants to and has already shared
  • January 22: Andrey Kukushkin lawyer Gerald Lefcourt says he just wants a privilege review
  • January 23: SDNY says Parnas should not be able to share iCloud information he obtained via discovery without review
  • January 24: Parnas lawyer Joseph Bondy makes a quick argument asserting they should be able to share the information
  • January 24: Bondy responds to Fruman letter at more length
  • January 27: Blanche responds again, invoking Dmitry Firtash to speak on behalf of unnamed others

The dispute started when Parnas asked to share content that the FBI seized from Parnas’ iCloud account and then provided to him in discovery. He listed just 11 Bates stamp numbers in the initial request, but it’s unclear what kind of files these are. In response, the lawyer that Fruman shares with Paul Manafort, Todd Blanche, objected to that request, and also asked to “claw back” any privileged materials that Parnas already produced to HPSCI (remember that Victoria Toensing has already complained that Parnas has violated privilege). Blanche makes a dig at Parnas’ media tour:

My obvious concern is that Mr. Bondy’s hasty efforts to find a forum (beyond MSNBC and CNN) for someone —  anyone — to listen to his client’s version of events caused him to irresponsibly produce privileged materials to the HPSCI.

One of the two other co-defendants, Andrey Kukushkin, weighed in — having been alerted by SDNY that, “its filter team identified materials in Mr. Parnas’ iCloud account that may fall within a common-interest attorney-client privilege held jointly by Mssrs. Kukushkin, Parnas, and aothers” — and stated that he did not object to Parnas sharing information “if all privileged materials can be removed from Mr. Parnas’ iCloud account prior to production to HPSCI.”

Having thus cued Parnas’ co-defendants to submit complaints, SDNY then weighed in, objecting to Parnas’ request. They invoke two reasons for their objection. The first poses interesting Fourth Amendment considerations; effectively SDNY argues that Parnas’ warrant return from Apple includes material that Parnas never possessed (and some material he deleted that only still exists because prosecutors obtained a preservation request).

The materials at issue include records that, as far as the Government knows, were never in Parnas’s possession. For instance, the data produced by Apple includes deleted records (which may only exist because of the Government’s preservation requests), account usage records, and other information to which a subscriber would not necessarily have access. The form of the report, which was created by the FBI, was also never in Parnas’s possession.

[snip]

Additionally, to the extent Parnas seeks to produce his own texts, emails, photographs or other materials, he should have access to the content stored on his iCloud account through other means: he can simply download his own iCloud account and produce it to HPSCI (and in fact, it appears he has already done so).

[snip]

To the extent that Parnas has deleted materials from his iCloud account, the Government is willing to work with counsel to ensure that Parnas can produce his own materials that are responsive to the Congressional request to HPSCI. To that end, the Government respectfully submits that Parnas’s counsel should identify for the Government any specific chats, emails, photographs, or other content Parnas is unable to access from his iCloud currently, but whic exist within the discovery that has been produced to him and in his view are responsive to the Congressional subpoena.

I find that stance interesting enough — basically a reverse Third Party doctrine, saying that subscribers aren’t the owners of the information Apple has collected on them, at least not in the former that FBI reports it out.

It’s the other objection I find most interesting. SDNY prosecutors — including one of the ones who argued against broad claims of privilege in the Michael Cohen — objects because the data from Parnas’ iCloud,

[I]t public disclosure still has the potential to implicate the privacy and privilege interests of third parties and co-defendants.

It then argues that requiring Parnas to specifically request content that he already deleted,

would also permit his co-defendants to raise any concerns with respect to their privilege or privacy interest prior to the materials’ release.

SDNY’s prosecutors are arguing that Parnas can’t release his own iCloud material because of other people’s privacy interests!! As if it is the place for SDNY’s prosecutors to decide what HPSCI considers proper levels of disclosure!!

I’ve been giving SDNY the benefit of the doubt on this prosecution, assuming that as prosecutors they would push back against any Bill Barr attempt to protect Rudy (though not the President). But this alarms me. It seems like SDNY is using Fruman — who is in a Joint Defense Agreement with Rudy — to speak for Rudy’s interests.

After making a cursory response to SDNY, Bondy responded in more detail to Fruman. In it, Bondy makes the kind of argument about the limits of privilege you’ll almost never see a lawyer make.

[T]he burden is on the party asserting the attorney-client privilege to first establish that there was: 1) a communication; 2) made in confidence; 3) to an attorney; 4) by a client; 5) for the purpose of seeking or obtaining legal advice. The part asserting attorney-client privilege has the burden of conclusively proving each element, and courts strongly disfavor blanket assertions of the privilege as “unacceptable.” In addition, the merre fact that an individual communicates with an attorney does not make the communication privileged.

There are also instances in which the attorney-client privilege is waived, including when the substance of otherwise privileged communications are shared with third parties, when the communications reflect a criminal or fraudulent intent between the parties, when the communications are part of a joint–yet conflicted–representation, and in cases where the parties to a joint defense have become adverse in their interests. 

Bondy then goes on to add that HPSCI “does not recognize attorney-client privilege,” which may be why, at about the time these letters were breaking, Jay Sekulow was on the floor of the Senate haranguing Democrats for not respecting that privilege (which Sekulow suggested was in the Bill of Rights). He uses that stance to suggest SDNY is making a claim that violates separation of powers.

From there, Parnas goes on to disavow any privilege shared in his brief Joint Defense Agreement with the Russian mob, in part based on discussions about his initial response to the HPSCI subpoena having been shared more widely.

Mr. Parnas waives all privilege with respect to the communications he had with Mssrs. Dowd and Downing. Furthermore, the substance of his and Mr. Fruman’s legal representation appears to have been shared with third parties, including Jay Sekulow, Rudolf Giuliani, John Sale, Jane Raskin, and others. … As the Court may know, Mssrs. Sekulow, Raskin, and Giuliani are also attorney for President Trump. Mr. Giuliani and the President have interests divergent from Mr. Parnas’s wish to cooperate with Congress and the Government. Mr. Parnas believes that his and Mr. Fruman’s ostensibly joint representation by Attorneys Dowd and Downing was conflicted and intended from its inception to obstruct the production of documents and testimony responsive to lawful congressional subpoena.

[snip]

Here, Attorney Dowd undertaking a joint representation of Mr. Parnas and Mr. Fruman — with the President’s explicit permission — constituted an actual conflict of interest at the time and appears designed to have obstructed Mr. Parnas’s compliance with HPSCI’s subpoenas and any ensuring efforts to cooperate with congressional investigators or federal prosecutors.

Bondy ends by saying it’s up to those claiming a conflict to invoke it.

Bondy makes it fairly clear: he believes the privilege SDNY has set Fruman up to object to involves Rudy and Trump, neither of whom are in a position to object, particularly given that if they do, Bondy will argue that Parnas believes their grift might be criminal and therefore the privilege doesn’t apply.

So instead of the President and his lawyer claiming that Parnas’ release of this material will violate privilege, Fruman does.

Mr. Fruman has reason to believe that the Production Material contains privileged information belonging to Mr. Fruman and others.

He invokes only the consultation of their shell company, Global Energy Producers, with [Rudy’s former firm] Greenberg Traurig in conjunction to substantiate a common attorney-client interest, then nods to more:

This is but one example, and there are many more, but certainly the privilege issues implicated by the repeated amendments to the Protective Order are far more expansive than the attorney-client relationships identified in Mr. Bondy’s letter.

Fruman then complains that he cannot — as Parnas has said he must do — invoke privilege because he’s not in possession of the materials (just the taint team and Parnas have them).

The best part is where, still faced with the problem that the people whose privilege is at issue (Rudy and Trump) cannot politically invoke it, Fruman finds someone else whose privilege, he says, has been violated: Dmitry Firtash.

Mr. Fruman is not the only person whose privilege information is at risk. For example, Mr. Parnas has represented that he was employed as a translator for Victoria Toensing and Joseph DiGenova in connection with their representation of Dymitry Firtash. Clearly, any materials Mr. Parnas received as a translator assisting attorneys in the representation of Mr. Firtash would be protected by attorney-client privilege. And that privilege would be held by Mr. Firtash, the client, not Mr. Parnas.

It’s increasingly clear what Parnas and Bondy are up to: They’re trying to make it politically (and given the OLC memo prohibiting the indictment of the President) bureaucratically impossible to pursue further charges. If everything recent Parnas did was done for the President, he shouldn’t be the only one facing prosecution for it.

Fruman, meanwhile, seems to be the sole member of the Joint Defense Agreement with the Russian Mob who is a party here, trying to prevent his position from deteriorating by speaking for all the affected parties, only without naming Rudy or Trump (presumably backed by the same old pardon promises Trump always uses to get witnesses against him to take the fall).

What’s not clear is what SDNY is up to. Because it sure seems like they’ve used Fruman to protect Trump’s and even Rudy’s interests.

Judge Oetken scheduled a hearing for Thursday to resolve all this. Which may be too late for Parnas’ play.

Share this entry

Charles Cooper’s Letter about Pre-Publication Review Discounts Any Executive Privilege Claims

In the wake of yesterday’s NYT story revealing damning details about John Bolton’s book manuscript, his lawyer, Charles Cooper, released the letter sent on December 30 laying out what they expected from the pre-publication review.

In it, Cooper (who while he was at the Office of Legal Counsel wrote at least one opinion laying the foundation for the unitary executive, one that helped cover up Iran-Contra) suggests there is only one basis on which the White House can object to the content of his client’s manuscript: classification.

I appreciate your assurance that the sole purpose of prepublication security review is to ensure that SCI or other classified information is not publicly disclosed. In keeping with that purpose, it is our understanding that the process of reviewing submitted materials is restricted to those career government officials and employees regularly charged with responsibility for such reviews.

Cooper leaves unstated his assertion that the White House cannot object to material in the book on Executive Privilege grounds, or any Absolute Immunity grounds that Pat Cipollone might dream up.

Such an assertion is wholly inconsistent with Cooper’s previous assertion (made for his other client, Charles Kupperman but which Bolton adopted by association) that the White House has any say over whether Bolton must respond to a dually authorized Congressional subpoena. Normally, a subpoena can overcome Executive Branch demands that the subpoenaed person not testify, if they want to testify. Here, Cooper is suggesting that the only restriction that the White House can impose on Bolton’s non-subpoenaed speech is classification review.

I get why he said it. He was trying to lay the groundwork for the statement he released last night, in which he suggested the White House had circulated Bolton’s manuscript outside those career civil servants who are entitled to review it.

But it will make it far harder to ignore future subpoenas, whether from the Senate, the House, or SDNY (in a Rudy Giuliani investigation).

Share this entry

Mueller’s 302s: The Apparent Referral of Rick Gerson’s 302s May Be as Interesting as Kushner’s

Last week, CNN explained why, even though DOJ had promised to release a certain set of FBI interview reports (302s) in the CNN/BuzzFeed FOIA for the underlying materials from the Mueller Report, Jared Kushner’s April 2018 interview report has not yet been released: An intelligence agency is reviewing the memo.

The Justice Department did not hand over the FBI’s summary of Jared Kushner’s interviews with special counsel Robert Mueller last week — despite a judge’s order to do so — because “a member of the intelligence community” needs to ensure the material has been properly redacted, a department attorney said Wednesday.

DOJ lawyer Courtney Enlow informed CNN as part of an ongoing lawsuit that Kushner’s memo, also known as a “302, will be released with the appropriate redactions” after the intelligence agency has finished its review.

Earlier this month, DOJ gave the plaintiffs in this FOIA suit a table that may provide useful background to it. Vast swaths of virtually all of these 302s have been withheld under a b5 exemption, which is broadly known as the deliberative privilege exemption. This table (“b5 table”) purports to explain which 302s have been withheld under which form of b5 exemption:

  • AWP: Attorney Work Product, basically a specious claim that because attorneys were present at an interview, the report produced by non-attorney FBI agents gets covered as a result
  • DPP: Deliberative Process Privilege, which is supposed to mean that the redacted material involves government officials trying to decide what to do about a policy or, in this case, prosecutorial decisions
  • PCP: Presidential Communications Privilege, meaning the redacted material includes discussions directly involving the President

The litigation over these b5 Exemptions was always going to be heated, given that DOJ is using them to hide details of what the President and his flunkies did in 2016. All the more so now that DOJ has adopted a broader invocation of b5 exemptions than they did earlier in this lawsuit, when they were limited to just discussions of law and charging decisions.

Still, the b5 table is useful in other ways.

Mary McCord interview purportedly includes Presidential Communications

For example, it shows that the government redacted parts of Acting NSD Director Mary McCord‘s interview report, which focused closely on her interactions with the White House Counsel about Mike Flynn’s lies to the FBI, as a Presidential Communication.

This claim  is probably fairly sketchy. She is not known, herself, to have spoken directly to Trump. And while much of her interview was withheld under b1 and b3 (at least partly on classification grounds pertaining to the FISA on which Flynn was captured, but also grand jury information with respect to the investigation into Mike Flynn) and b7E (law enforcement methods), the parts that were withheld under b5 appear to be her speaking to Don McGahn, including bringing information to him, rather than the reverse.

Crazier still, we’ve all been pretending that Flynn lied about his calls with Sergey Kislyak of his own accord; the Mueller Report remained pointedly non-committal on whether Flynn undercut Obama’s sanctions on Trump’s orders or not. Protecting these conversations as a Presidential Communication seems tacit admission that Don McGahn’s interactions with McCord were significantly about Trump, not Flynn.

Chris Ruddy’s interview unsurprisingly includes Presidential Communications

It is thoroughly unsurprising that DOJ is withholding parts of Chris Ruddy’s interview as Presidential Communications. After all, during the period about which the unredacted parts of the interview show he was interviewed (summer 2017), Ruddy served as Trump’s rational brain, so it would be unsurprising if Ruddy told Mueller’s team certain things he said to Trump.

Though even there, there are passages that seem like may be an improper assertion of Presidential Communications, such as what appears to be a meeting at the White House with Reince Priebus and Steve Bannon — neither of whom is the President — asking for his help to go make a public statement mind-melding him into not firing Mueller.

As the Mueller Report passages sourced to this interview make clear, this is a PR request, not a presidential communication.

On Monday, June 12, 2017, Christopher Ruddy, the chief executive of Newsmax Media and a longtime friend of the President’s, met at the White House with Priebus and Bannon.547 Ruddy recalled that they told him the President was strongly considering firing the Special Counsel and that he would do so precipitously, without vetting the decision through Administration officials.548 Ruddy asked Priebus if Ruddy could talk publicly about the discussion they had about the Special Counsel, and Priebus said he could.549 Priebus told Ruddy he hoped another blow up like the one that followed the termination of Comey did not happen.550 Later that day, Ruddy stated in a televised interview that the President was “considering perhaps terminating the Special Counsel” based on purported conflicts of interest.551 Ruddy later told another news outlet that “Trump is definitely considering” terminating the Special Counsel and “it’s not something that’s being dismissed.”552 Ruddy’s comments led to extensive coverage in the media that the President was considering firing the Special Counsel.553

White House officials were unhappy with that press coverage and Ruddy heard from friends that the President was upset with him.554

Still, the fact that DOJ maintains that some of this interview involves Presidential Communications is interesting because of the point I made in this post: Passages currently redacted for an ongoing criminal proceeding suggest Ruddy’s other communications, possibly with Manafort or his lawyer, are part of an ongoing criminal proceeding.

I’m interested in Ruddys’ 302 because four paragraphs that show a b7ABC redaction, which mostly has been used to hide stuff pertaining to Roger Stone.

I doubt this redaction pertains to Stone, though, at least not exclusively.

As I noted last June when Amy Berman Jackson liberated the Sean Hannity texts with Manafort, she withheld another set of communications (probably showing Kevin Downing reached out to the media, as he had done with Hannity, which is why they were submitted as part of Manafort’s sentencing). She withheld the other texts because of an ongoing proceeding.

At the time, I suggested that the other proceeding might pertain to Chris Ruddy because:

  • Ruddy was a key source for a key Howard Fineman story in the same time frame as Kevin Downing had reached out to Hannity
  • Prosecutors probably obtained all of Manafort’s WhatsApp texts after learning he had been witness tampering using that account
  • Ruddy testified to Mueller the day after they had extracted the Manafort-Hannity texts, suggesting he was a likely candidate to be the other person whose texts showed ongoing communication with the media

DOJ may be withholding discrete paragraphs in Ruddy’s interview both because they are a Presidential Communication and because they are part of an ongoing investigation. Which seems like something CNN and BuzzFeed might want to clarify.

Hiding the most damning Sater and Bannon and (possibly) KT McFarland interviews?

Then there are three interviews DOJ claims to have turned over for which the interviewee’s name has been withheld.

One of those, for an interview on August 15, 2017, happened on a day when Mueller’s team conducted five interviews (or, given the 1-page length of three of them, more likely phone calls setting up interviews). One of those is of Andrej Krickovic, a Carter Page associate who is not listed on the master list of interviews but whose name was identified in his 302. But the interview in question is being withheld under a Presidential Communications exemption, so surely is not Krickovic. There’s a 6-page interview from that date reflected in the DOJ list of all interviews (“Mueller interview list”) that is likely the one in question. And given that the earliest released interview of KT McFarland, dated September 14, 2017, describes her being “acquainted with the interviewing agents from a previous interview,” given reports that her first most egregious lies about Flynn’s calls to Kislyak came during the summer (before it was clear that Mueller’s team was going to obtain a warrant to get Transition emails from GSA), and given the September 302 reflects her attempt to clear up several existing untruths, I’m guessing that’s hers.

There’s more evidence regarding the subjects of two other 302s from which the names have purportedly been withheld. The b5 table includes a December 15, 2017 interview being withheld exclusively as Attorney Work Product. It seems likely that this is the December 15, 2017 Felix Sater interview reflected in the Mueller interview list. Immediately before the September 19, 2017 Sater interview are 7 pages that were entirely withheld (1394 through 1400) under b3 (grand jury or classification), b6 and b7C (collectively, privacy), b7E (law enforcement sources and methods), b7F (likely risk of death), and b5. Sater is one of — if not the only — person whose interviews have been protected under b7F (which makes sense, given that he was a high level informant for years).  Plus, there’s reason to believe that Sater’s story evolved after he was interviewed by HPSCI on December 14, 2017, and DOJ seems especially interested in hiding how some of these stories changed over time. In other words, DOJ seems to be hiding the entirety of a Sater interview the existence of which they already acknowledged under a whole slew of exemptions, including Attorney Work Privilege. That would be particularly egregious, given that Mueller relied on that interview to support the following details about Trump Tower:

Given the size of the Trump Moscow project, Sater and Cohen believed the project required approval (whether express or implicit) from the Russian national government, including from the Presidential Administration of Russia.330 Sater stated that he therefore began to contact the Presidential Administration through another Russian business contact.331

[snip]

The day after this exchange, Sater tied Cohen’s travel to Russia to the St. Petersburg International Economic Forum (“Forum”), an annual event attended by prominent Russian politicians and businessmen. Sater told the Office that he was informed by a business associate that Peskov wanted to invite Cohen to the Forum.367

In a follow-up, I’ll explain why DOJ’s attempt to withhold this interview by hiding the existence of it even though they’ve already acknowledged it is fairly damning.

In addition, the b5 table lists a January 18, 2019 interview withheld under Presidential Communication and Deliberative Process Privilege, but not Attorney Work Product (which might suggest it was an interview FBI agents conducted with no prosecutor present). While there was stuff pending in the Jerome Corsi investigation at the time (which might explain the lack of lawyers but probably not a Presidential Communication Privilege), the only interview on that date included in the Mueller interview list involves Steve Bannon. That’s interesting because while his proffer agreement (signed by Andrew Goldstein, so seemingly reflecting Goldstein’s presence at the interview of that date) shows in the batch of 302s in which this withheld one is supposed to have appeared, his interview of that date (which is 4 pages long) does not appear. There’s not an obvious set of withheld pages that might be that interview (there are 6-page withholdings that might include it). But Bannon’s January 18, 2019 was, given some comments at the Stone trial, particularly damning and conflicts with the one (of three) Bannon 302 that has been made public. Just one sentence of the Mueller Report — pertaining to the campaign’s discussions about upcoming WikiLeaks releases but still redacted for Stone’s trial — relies on this Bannon interview, but since it does, the interview itself should not be entirely redacted. (That said, the entirety of Bannon’s 16-page October 26, 2018 302 has also been hidden in plain sight in these releases.)

There is, admittedly, varying degrees of certainty about these hypotheses. But if they are correct, it would suggest that DOJ is systematically withholding 302s that would show significant changes in testimony among people who were not charged for lying in the earlier ones. Of particularly note, they may be hiding one each that BuzzFeed (which had the lead in reporting the Felix Sater story) and CNN (which was one of the few outlets that reported how KT McFarland had to clean up her testimony) have an institutional stake in.

Rick Gerson disappeared into the same Agency review as Jared Kushner?

Finally, the b5 table reveals DOJ has “released” the two interviews from Rick Gerson, even though we’ve seen no hint of them.

You might be forgiven for forgetting who Rick Gerson is — Steven Bannon even claimed to have in his first, least forthcoming interview. He’s a hedgie who is close to Jared Kushner who actually had a key role in setting US-Russian policy from the start of the Trump Administration. George Nader introduced him to the CEO of the Russian Direct Investment Fund, Kirill Dmitriev, after which Gerson (who had no official role in the Transition or Administration so presumably had no security clearance) and Dmitriev put together a reconciliation plan between Russian and the US.

In addition, the UAE national security advisor introduced Dmitriev to a hedge fund manager and friend of Jared Kushner, Rick Gerson, in late November 2016. In December 2016 and January 2017, Dmitriev and Gerson worked on a proposal for reconciliation between the United States and Russia, which Dmitriev implied he cleared through Putin. Gerson provided that proposal to Kushner before the inauguration, and Kushner later gave copies to Bannon and Secretary of State Rex Tillerson.

Gerson’s two interviews are cited 17 times in the Mueller Report and cover topics including:

  • Gerson’s ties to Jared and non-existent role on the campaign
  • Gerson’s role setting up meetings with Tony Blair and Mohammed bin Zayed
  • How Nader introduced him to Dmitriev
  • How Dmitriev pitched Gerson on a potential joint venture
  • How Gerson, having been promised a business deal, then worked to figure out from Jared and Mike Flynn who was running “reconciliation” on the Transition
  • What Dmitriev claimed his relationship to Putin was
  • How Gerson, “on his own initiative and as a private citizen,” worked with Dmitriev during December 2016 to craft this “reconciliation” plan
  • How Gerson got that plan into Kushner’s hands and it formed a key part of the discussion between Trump and Putin on their January 28, 2017 call
  • How Dmitriev seemed to lose interest in doing business with Gerson once he had finished using him

A key part of this discussion relies on both Gerson’s interviews and the Kushner one that is being reviewed by an Agency.

On January 16, 2017, Dmitriev consolidated the ideas for U.S.-Russia reconciliation that he and Gerson had been discussing into a two-page document that listed five main points: (1) jointly fighting terrorism; (2) jointly engaging in anti-weapons of mass destruction efforts; (3) developing “win-win” economic and investment initiatives; (4) maintaining an honest, open, and continual dialogue regarding issues of disagreement; and (5) ensuring proper communication and trust by “key people” from each country. 1111 On January 18, 2017, Gerson gave a copy of the document to Kushner. 1112 Kushner had not heard of Dmitriev at that time. 1113 Gerson explained that Dmitriev was the head of RDIF, and Gerson may have alluded to Dmitriev’s being well connected. 1114 Kushner placed the document in a file and said he would get it to the right people. 1115 Kushner ultimately gave one copy of the document to Bannon and another to Rex Tillerson; according to Kushner, neither of them followed up with Kushner about it. 1116 On January 19, 2017, Dmitriev sent Nader a copy of the two-page document, telling him that this was “a view from our side that I discussed in my meeting on the islands and with you and with our friends. Please share with them – we believe this is a good foundation to start from.” 1117

1111 1/16/17 Text Messages; Dmitriev & Gerson.

1112 Gerson 6/5/18 302, at 3; Gerson 6/15/18 302, at 2.

1113 Gerson 6/5/18 302, at 3.

1114 Gerson 6/5/18 302, at 3; Gerson 6/15/18.302, at 1-2; Kushner 4/11/ 18 302, at 22.

1115 Gerson 6/5/18 302, at 3.

1116 Kushner 4/11/18 302, at 32.

1117 1/19/17 Text Message, Dmitriev to Nader (11: 11 :56 a.m.).

There are roughly 62 pages referred to another agency in the January 2 release (which is understood to include Kushner’s April 11, 2018 interview) is an 11-page series (1216-1226), which might be Gerson’s two interviews. That suggests we can’t even get the 302s that show how Putin’s selected envoy to the US managed to plan out the first phone call between Putin and Trump with a hedgie who went to college with Kushner with not formal ties to the Transition or Administration and no security clearance because they’re so sensitive — more sensitive than KT McFarland’s discussion of Transition national security discussions, for example — that some Agency like the CIA has to give us permission first.

Share this entry

NSA Is Probably Withholding Details of the Alleged Burisma Hack from Congress

Over the weekend, Adam Schiff and other impeachment managers started alleging that the NSA is withholding information about Ukraine from the Intelligence Committees and impeachment team.

“And I’ll say something even more concerning to me, and that is the intelligence community is beginning to withhold documents from Congress on the issue of Ukraine,” Schiff said. “The NSA, in particular, is withholding what are potentially relevant documents to our oversight responsibilities on Ukraine, but also withholding documents potentially relevant that the senators might want to see during the trial.”

Schiff added: “There are signs that the CIA may be on the same tragic course. We are counting on the intelligence community not only to speak truth to power, but to resist pressure from the administration to withhold information from Congress because the administration fears that they incriminate them.”

An Intelligence Committee official later said, “Both the NSA and CIA initially pledged cooperation, and it appears now that the White House has interceded before production of documents could begin.”

Schiff had dropped the claim, at times, in his presentation to the Senate and to the press.

But in his stem-winding close last night, he mentioned the alleged Burisma hack in a way that strongly suggests that’s what NSA is withholding.

Now we just saw last week a report that Russia tried to hack, or maybe did hack, Burisma. Okay. I don’t know if they got in. I’m trying to find out. My colleagues on the Intel Committee, House and Senate, we’re trying to find out, did the Russians get in? What are the Russian plans and intentions? Well, let’s say they got in. And let’s say they start dumping documents to interfere in the next election. Let’s say they start dumping some real things they hacked from Burisma, let’s say they start dumping some fake things they didn’t hack from Burisma, but they want you to believe they did. Let’s say they start blatantly interfering in our election again, to help Donald Trump. Can you have the least bit of confidence that Donald Trump will stand up to them and protect the national interest over his own personal interest? You know you can’t.

Schiff’s speech was a planned show-stopper, climax, thus far, of the impeachment trial. It is highly unlikely Schiff included this mention, with the detail that he and both the Intelligence Committees are trying to figure out whether Burisma really got hacked, without very good reason.

But it also goes to the power of information war.

When NYT first reported that GRU had hacked Burisma, I had two thoughts.

The hackers fooled some of them into handing over their login credentials, and managed to get inside one of Burisma’s servers, Area 1 said.

“The attacks were successful,” said Oren Falkowitz, a co-founder of Area 1, who previously served at the National Security Agency. Mr. Falkowitz’s firm maintains a network of sensors on web servers around the globe — many known to be used by state-sponsored hackers — which gives the firm a front-row seat to phishing attacks, and allows them to block attacks on their customers.

“The timing of the Russian campaign mirrors the G.R.U. hacks we saw in 2016 against the D.N.C. and John Podesta,” the Clinton campaign chairman, Mr. Falkowitz said. “Once again, they are stealing email credentials, in what we can only assume is a repeat of Russian interference in the last election.”

[snip]

To steal employees’ credentials, the G.R.U. hackers directed Burisma to their fake login pages. Area 1 was able to trace the look-alike sites through a combination of internet service providers frequently used by G.R.U.’s hackers, rare web traffic patterns, and techniques that have been used in previous attacks against a slew of other victims, including the 2016 hack of the D.N.C. and a more recent Russian hack of the World Anti-Doping Agency.

“The Burisma hack is a cookie-cutter G.R.U. campaign,” Mr. Falkowitz said. “Russian hackers, as sophisticated as they are, also tend to be lazy. They use what works. And in this, they were successful.”

First, this attribution is not (yet) as strong as even the first attribution that GRU had hacked the DNC, to say nothing of the 30 non-government sources for that attribution since laid out in the GRU indictment and the Mueller Report. There’s good reason to remain cautious about this attribution until we get more than one not very well established contractor attributing the hack.

But to some degree, it doesn’t matter whether GRU hacked Burisma and whether they took documents with plans to leak them during the election. Indeed, disinformation may explain why this was an easily identifiable hack, whether done by GRU or someone else. Because the news that someone appearing to be GRU targeted Burisma in early November — when it was clear Trump would be impeached for extorting Volodymyr Zelensky to get dirt on Burisma — serves a clear purpose. It adds evidence that Trump is owned by Russia and, after the Senate doesn’t vote to remove him, will demonstration that Republicans don’t much give a damn that he is owned by Russia.

To be clear: There’s abundant evidence that Russia does have leverage over Trump, and more is likely to be forthcoming.

But that’s far more valuable, for Russia, if that’s public and if the Republicans in the Senate sanction it.

And that may explain why NSA is withholding the information, if indeed that’s what they’re withholding. In the same way that the FBI went to great lengths to withhold a letter they believed to be disinformation suggesting that Loretta Lynch would fix the Hillary investigation, information that appears to add to the already abundant case that Russia is in the tank for Trump. Given the stakes, that doesn’t justify it. But at this point, GRU wouldn’t need to hack Burisma for any point — the hack itself, in the middle of the impeachment investigation, is enough to lay a marker on Donald J. Trump.

He belongs to the GRU, the hack says, whether or not he does anything affirmatively to confirm that claim. But if the NSA is withholding that detail, it would seem to confirm the point.

Share this entry

Joshua Schulte Spoke Positively of Edward Snowden the Day Snowden Came Forward

Here I thought that Joshua Schulte’s lawyers had finally come up with a decent argument, that Paul Rosenzweig’s testimony would be pointless to prove that Schulte, in choosing to leak to WikiLeaks, intended to damage the US because the government would have to prove Schulte knew of WikiLeaks when he allegedly first stole the CIA documents in May 2016.

But after pointing out that Schulte’s lawyers already blew their chance to make that argument, in a response the government  then pointed out how bad this argument is: because Schulte’s lawyers have already admitted that, “of course, Mr. Schulte knew” about Chelsea Manning’s leaks.

As an initial matter, the defendant’s Reconsideration Motion directly contradicts the argument he made in his original motions in limine concerning Mr. Rosenzweig’s testimony. The defendant argues in the instant motion that Mr. Rosenzweig’s testimony should not be admitted because there is no evidence that the defendant knew of, for example, Chelsea Manning’s disclosures to WikiLeaks. In his original opposition to the Government’s motions in limine, however, the defendant argued the exact opposite:

Next, the government says that it intends to introduce evidence of Mr. Schulte’s “knowledge of [Ms.] Manning’s leak.” Gov. Res. 11. The release of documents by Ms. Manning was front page news in every major news publication for numerous days. Of course, Mr. Schulte knew about it; so did everyone else who picked up a newspaper. It is not clear what the expert would have to add to this information. (Dkt. 242 at 44).

Worse, the government lays out not just that Schulte wrote about both Manning’s leaks to WikiLeak and Edward Snowden’s leaks, but discloses that they intend to introduce those chats at trial.

Moreover, even setting aside the dubious assertion that a member of the U.S. intelligence community could have been completely unaware of WikiLeaks’ serial disclosures of classified and sensitive information and the resulting harm, the Government’s proof at trial will include evidence that the defendant himself was well aware of WikiLeaks’ actions and the harms it caused. For example, WikiLeaks began to disclose classified information Manning provided to the organization beginning in or about April 2010, including purported information about the United States’ activities in Afghanistan. In electronic chats stored on the defendant’s server, the defendant discussed these disclosures. For example, on August 10, 2010, the defendant wrote in a chat “you didn’t read the wikileaks documents did you?” and, after that “al qaeda still has a lot of control in Afghanistan.” In addition, on October 18, 2010, the defendant had another exchange in which he discussed Manning’s disclosures, including the fact that the information provided was classified, came from U.S. military holdings, and that (according to the defendant) it was easy for Manning to steal the classified information and provide it to WikiLeaks. Similarly, in a June 9, 2013 exchange, the defendant compared Manning to Edward Snowden, the contractor who leaked classified information from the National Security Agency, and stated, in substance and in part, that Snowden, unlike Manning, “didnt endanger in [sic] people.”

Effectively, the government is going to show that Schulte — who like Snowden worked at both CIA and NSA (though in reverse order) — had decided the day that Snowden revealed himself that he hadn’t endangered someone.

I suggested in this post that the government appears to be preparing to use Schulte as an exemplar of an ongoing conspiracy, complete with their reliance on organized crime precedents.

[T]he government is preparing to argue that Schulte intended to harm the United States when he leaked these files to WikiLeaks, a stronger level of mens rea than needed to prove guilt under the Espionage Act (normally the government aims to prove someone should have known it could cause harm, relying on their Non-Disclosure Agreements to establish that), and one the government has, in other places, described as the difference between being a leaker and a spy.

To make that argument, the government is preparing to situate Schulte’s leaks in the context of prior WikiLeaks releases, in a move that looks conspicuously like the kind of ongoing conspiracy indictment one might expect to come out of the WikiLeaks grand jury, one that builds off some aspects of the existing Assange indictment.

That is, the government appears to be using Schulte to lay out their theory — rolled out in the wake of the Vault 7 leaks — that WikiLeaks is a non-state hostile intelligence service.

To be sure, there’s nothing in the least bit incriminating about talking about Snowden in real time. But it will make it a lot easier to hold Schulte accountable for leaking stuff in a far more damaging way in 2016 than Snowden did in 2013.

As I disclosed in 2018, I provided information to the FBI in 2017.

Share this entry

Joshua Schulte’s Plans from Jail: “#TopSecret#FuckYourTopSecret”

In response to an order from Judge Paul Crotty, the government laid out what evidence it wants to use from prison notebooks seized from accused Vault 7 leaker Joshua Schulte’s jail cell. The whole filing is –as all descriptions of these notebooks have been — utterly damning.

For example, the filing explains a reference the government had earlier made: that Schulte had made reference to non-public information about what WikiLeaks had received in the Vault 7 leak. Schulte wrote a note sometime in July 2018 suggesting that if “you” needed help, they should ask WikiLeaks for Schulte’s “code.”

“Ask WikiLeaks” (014099) (undated): In the middle of the page, the defendant writes, “If you need help ask WikiLeaks for my code.”3 The defendant’s direction to consult WikiLeaks about his “code” is admissible as Nonpublic Information Evidence, because it is a statement that WikiLeaks is in possession of source code for tools upon which the defendant worked and that are contained in the back-up file that was stolen, even though WikiLeaks has not publicly disclosed that it possesses any source code for all of the tools. Schulte’s knowledge of non-public aspects of the information that was given to WikiLeaks helps to demonstrate that he was the one who gave that information to WikiLeaks in the first place.

Schulte wrote this in the second person, suggesting he was advising (or planning to advise) someone to use source code he wrote. He is known to have worked on obfuscation tools and a remote USB exfiltration tool. If he did intend that as instruction, he assumed the person in question would have been able to consult directly with WikiLeaks. It’s unclear to what end Schulte was imagining advising someone to use obfuscation or hacking tools written for the CIA.

In any case, the government claims that’s proof that Schulte knows exactly what was in WikiLeaks’ possession.

A later entry suggests Schulte and someone else — “we” — were trying to compromise email, possibly his own CIA email.

“What We Expect to Find in Emails” (014136) (undated): At the top of this page, the defendant writes “What we expect to find in emails.” On the remainder of the page, the defendant writes a list of items, many of which contained classified information. This portion of the Blue Notebook is admissible as Intent Evidence and MCC Classified Information Evidence, because it shows the defendant cataloguing classified information that, if publicly disclosed, would likely be harmful to the United States. Indeed, some of the categories of information identified by the defendant on this page—such as certain operations—is the same as the classified information contained in the Fake Authentication Tweet, which serves to show that the defendant’s intent was to collect these materials for dissemination, not for any legitimate purpose related to his defense.

Later, the letter describes a part of Schulte’s planned Information War on the United States, probably dating to late August or early September 2018, one he wanted to roll out in a tweet with the hash tag, “#TopSecret#FuckYourTopSecret.”

Over these three pages, Schulte wrote the following. At the top of the first page, Schulte wrote “#TopSecret#FuckYourTopSecret,” and under that draws an arrow to the phrase “or dump the secrets here:”. At the top of the page Schulte also wrote “establish credibility,” and, underneath that appears another version of the Fake Authentication Tweet. Later, the defendant recommends to U.S. intelligence agency employees to “send all your govt’s secrets here: WikiLeaks” until the U.S. government “honors” their service. As with the last entry, this is entry contains MCC Classified Information Evidence in the form of the Fake Authentication Tweet. In addition, the instruction to intelligence agency employees to give their “secrets” to WikiLeaks is Intent Evidence.

Effectively, the government seems to be arguing, Schulte planned to use a Twitter account in the name of Jason Bourne to encourage US intelligence agency employees to leak information to WikiLeaks, something Julian Assange did himself in a post-Snowden 2013 speech. Not only does this suggest Schulte was shifting into recruitment mode, but it validates the motive the government claims he himself had for leaking the CIA’s hacking tools, because the CIA didn’t “honor” his service. That’s one of the classic recruitment motives (of money, ideology, compromise, and ego, the latter).

These parts of Schulte’s prison notebooks, then, suggest he was doing more than just posting his blogposts and sharing a CIA network diagram from jail. He was at least imagining he might use tools he wrote for the CIA to steal emails full of classified secrets and also recruit others to feed WikiLeaks with more classified information over Twitter.

Schulte’s team, in one of the only filings they’ve submitted that makes a decent point in Schulte’s defense, finally offered an explanation for why this may not be as damning as it looks.

In yet another bid to get Paul Rosenzweig’s testimony showing how Schulte’s actions fit into a pattern that make look WikiLeaks look like a criminal organization, they argue that Rosenzweig’s testimony that leaking to WikiLeaks would exhibit an intent to damage the US could only work if the government first proved that Schulte knew how WikiLeaks worked.

The Court ruled, in relevant part, that “[a]n understanding of the WikiLeaks organization and how it operates is directly relevant to the allegation that, In transmitting Classified Information to WikiLeaks, Schulte intended or had reason to believe there would be injury to the United States.” Dkt. 256, at 4. This ruling makes sense only if the government first presents foundational evidence showing that Mr. Schulte knew how WikiLeaks was organized and operated. Absent such evidence showing what Mr. Schulte knew, expert testimony about these subjects would be totally disconnected from—and therefore would have no bearing on—Mr. Schulte’s state of mind.

[snip]

Here, absent proof that Mr. Schulte was aware of how WikiLeaks was organized or functioned, Mr. Rosenzweig’s testimony about those subjects, even if accurate and admissible under Fed. R. Evid. 702, would be irrelevant to what Mr. Schulte “intended or had reason to believe” when he allegedly leaked information to WikiLeaks in 2016. As in Kaplan, it would be error to admit this testimony without the required connection to what Mr. Schulte actually knew.

The same principle applies to Mr. Rosenzweig’s purported testimony about harm ostensibly caused by prior WikiLeaks revelations. If Mr. Schulte did not know in 2016 about the prior revelations or the harm they supposedly caused to the United States, any expert testimony about those revelations and resulting harm is irrelevant (and unfairly prejudicial under Rule 403).

In earlier filings, the government has made much of the fact that August 4, 2016 is the first or one of the first times Schulte ever searched Google for information on WikiLeaks. And, trust me, this guy recorded everything in his Google searches. So, the defense could argue, Schulte didn’t even begin to learn about the outlet he had leaked to until three months after he leaked the files to them (nevermind how he figured out how to get it to them).

This only works to limit the applicability of Rosenzweig’s testimony for the CIA leaks, not the leaks and attempted leaks from MCC. Plus, Schulte’s claim to have been part of Anonymous — whether or not it’s true — would amount to a claim that he operated in an environment where he would have learned of WikiLeaks in chatrooms. But it’s not clear the government could prove that.

Whether or not they can show Schulte’s actions are part of a longer campaign by WikiLeaks to encourage intelligence professionals to leak to WikiLeaks to avenge slights by the government, the notebooks are even more damning than the government has previously revealed.

As I disclosed in 2018, I provided information to the FBI on issues related to the Mueller investigation.

Share this entry