April 30, 2024 / by 

 

Merrick Garland Calls Trump’s Bluff

Merrick Garland just announced that the government has moved to unseal limited parts of the search warrant application used to search Mar-a-Lago, pending giving Trump an opportunity to object.

Garland cited the public interest, but also Trump’s disclosure of the search himself.

Although the government initially asked, and this Court agreed, to file the warrant and Attachments A and B under seal, releasing those documents at this time would not “impair court functions,” including the government’s ability to execute the warrant, given that the warrant has already been executed. See Romero, 480 F.3d at 1246. Furthermore, on the day that the search was executed, former President Trump issued a public statement that provided the first public confirmation that the search had occurred. Subsequently, the former President’s representatives have given additional statements to the press concerning the search, including public characterizations of the materials sought.

But he’s not asking to unseal the whole warrant application.

On the contrary. He’s only unsealing precisely the documents that Trump already has in his possession: the warrant itself and Appendices A (describing this house) and B (describing what can be seized). Indeed, the motion notes that the FBI gave Trump these documents.

In these circumstances involving a search of the residence of a former President, the government hereby requests that the Court unseal the Notice of Filing and its attachment (Docket Entry 17), absent objection by former President Trump. The attachment to that Notice consists of:

  • The search warrant signed and approved by the Court on August 5, 2022, including Attachments A and B; and
  • The redacted Property Receipt listing items seized pursuant to the search, filed with the Court on August 11, 2022.

The government will respond to the direction of the Court to provide further briefing as to additional entries on the docket, pursuant to the schedule set by the Court.

Consistent with standard practice in this Court, the search warrant and attachments were each filed under seal in Case No. 22-mj-8332-BER prior to the search; the Property Receipt was filed under seal today. Former President Trump, through counsel, was provided copies of each of these documents on August 8, 2022, as part of the execution of the search.

These documents are precisely the ones that Trump could have released all by himself, but chose not to. He could object now. But if he did, it would make clear — as if all the refusals to release it to journalists hasn’t already — that it’s really damning.

And now — in a short announcement where he took no questions, but where Garland made a fierce defense of DOJ and the FBI — Garland is calling Trump’s bluff.

Update: I’ve annotated this warrant from the Roger Stone search warrant to show what Garland wants released. The warrant itself (which will show what crimes Trump is being investigated for), Attachment A (which will describe Mar-a-Lago and possibly the specific locations of interest), and Attachment B (which will describe the things being searched for, written generically). They would also release the warrant return, which would list what the FBI took; NYT says that document is 2 pages (I’m trying to think of an example to share).

This post shows the likely content in the warrant, including in the affidavit, which we won’t get.

Update: Surly Duff corrected my vocabulary, which was sloppy. The warrant is what I’ve been calling the cover sheet. The Appendices are the descriptions of what can be searched. The application as a whole, though, would include the affidavit, which is the thing people are really interested.


Trump Keeps Using the Word “Cooperate.” I Do Not Think That Word Means What Trump Wants the Press To Think It Means

It’s that time that comes in many high profile investigations where it becomes prudent to remind readers — and journalists! — that the word “cooperate,” even the word “inform,” may not mean what sources want you think it does.

Correction: It’s long past the time to remind journalists that investigative subjects will boast to the press about “cooperating,” when their lawyers really mean, “complying” with the most basic requirements of legal process. When Ali Alexander ran to the press revealing he had received a subpoena (revealing a subpoena is something investigators generally consider uncooperative), most outlets repeated his claim to have “agreed to cooperate” with DOJ. What Alexander described instead was “compliance,” not cooperation.

Nevertheless, some really experienced legal beat reporters used the words often reserved for someone who has entered into a cooperation agreement to describe Alexander’s compliance and they did so in articles probably pitched as a way to share details revealed in a subpoena with other suspects in an investigation.

The latest messaging strategy from Trump demonstrates why the subject of an investigation might do this. This detailed WSJ report is based on Trump sources reading the content of letters sent between Trump lawyer Evan Corcoran and counterintelligence head Jay Bratt in June.

Aides to Mr. Trump have said they had been cooperating with the department to get the matter settled. The former president even popped into the June 3 meeting at Mar-a-Lago, shaking hands. “I appreciate the job you’re doing,” he said, according to a person familiar with the exchange. “Anything you need, let us know.”

Five days later, Trump attorney Evan Corcoran received an email from Mr. Bratt, the chief of the Justice Department’s counterintelligence and export control section, who oversees investigations involving classified information.

“We ask that the room at Mar-a-Lago where the documents had been stored be secured and that all the boxes that were moved from the White House to Mar-a-Lago (along with any other items in that room) be preserved in that room in their current condition until further notice,” according to what was read to the Journal over the phone.

Mr. Corcoran wrote back, “Jay, thank you. I write to acknowledge receipt of this letter. With best regards, Evan.” By the next day, according to a person familiar with the events, a larger lock was placed on the door. It was the last communication between the men until Monday’s search of Mar-a-Lago, according to the person.

On June 22, the Trump Organization, the name for Mr. Trump’s family business, received a subpoena for surveillance footage from cameras at Mar-a-Lago. That footage was turned over, according to an official. [my emphasis]

Side note: The nice thing about Trump sharing a lawyer, Corcoran, with Steve Bannon is that we can evaluate Corcoran’s credibility based off stunts he pulled in Bannon’s case — which is a good reason to expect his representation of these events is not entirely forthcoming, especially when made without the ethical obligations stemming from making them as an officer of the court.

So this exchange, which doesn’t rule out further contact with Mar-A-Lago and which likely misrepresents Trump’s conviviality at having the head of DOJ’s espionage prosecutors waltzing into his golf resort, is designed to present the illusion of full “cooperation.”

And Trump’s spox uses that portrayal, later in the story, to claim that a search — the spox calls it a “raid” — was unnecessary. Trump had been so cooperative, the WSJ relays Trump camp claims, that his unreliable lawyer was even engaged in “breezy chats” with the head of the department that prosecutes spies.

“Monday’s brazen raid was not just unprecedented, it was completely unnecessary,” Trump spokesman Taylor Budowich said. “President Trump and his representatives have gone to painstaking lengths in communicating and cooperating with all the appropriate agencies.”

WSJ doesn’t hide that this story is the one they’re being pitched.

A timeline of events, they say, demonstrates this cooperation, down to quickly fulfilling the June request to place a new lock on the storage door.

But it also doesn’t consider why putting a lock on a room full of suspected stolen documents amounts to cooperation.

More importantly, WSJ admits it doesn’t have the one detail that would test whether this fairy tale of cooperation were true or not: the warrant showing which crimes were being investigated, as well as the warrant return showing whether the government had obtained evidence that confirmed the suspicions they used to obtain probable cause.

The warrant, signed by a judge in Palm Beach County, refers to the Presidential Records Act and possible violation of law over handling of classified information, according to Christina Bobb, a lawyer for the former president. The warrant hasn’t been made public by Mr. Trump nor has the inventory of documents retrieved by the government.

The warrant Trump’s lawyers received doesn’t refer to “possible violation of law over handling classified information,” it refers to a law, possibly even the Espionage Act. Simply sharing that warrant and return would tell us far more about whether Trump was as cooperative as his unreliable lawyer — who made virtually identical claims about his contemptuous client Steve Bannon’s “cooperation” — now wants to claim about Trump.

There is a significant legal reason why Trump’s lawyers would like to claim he was cooperative, aside from ginning up threats against judges from Trump’s mob. As I laid out here, “fail[ing] to deliver [National Defense Information] to an officer or employee of the United States entitled to receive it,” is a key element of 18 USC 793e. So in addition to stoking violence, it’s possible that Trump is already attempting to set up a defense for trial, that he simply had not yet complied with DOJ and NARA requests to give back the stolen documents, but surely would have if they just asked nicely one more time. This is, in fact, precisely the argument Corcoran made for Bannon at trial: he would have cooperated if only Bennie Thompson would have accepted a last minute offer to cooperate.

Anyway, given abundant precedent, it’s probably too late. If you’re storing stolen classified information in your basement, with or without a substantial padlock, you’ve committed the crime of unauthorized retention of NDI.

The issue of cooperation extends beyond Evan Corcoran’s dubious (and provably false, in Bannon’s case) claims of cooperation, though.

WSJ seems to match far more inflammatory reporting from William Arkin in Newsweek, that someone told DOJ that Trump still had classified documents at Mar-a-Lago.

In the following weeks, however, someone familiar with the stored papers told investigators there may be still more classified documents at the private club after the National Archives retrieved 15 boxes earlier in the year, people familiar with the matter said. And Justice Department officials had doubts that the Trump team was being truthful regarding what material remained at the property, one person said. Newsweek earlier reported on the source of the FBI’s information.

Arkin is a well-sourced reporter (though not a DOJ reporter), but Newsweek is no longer a credible outlet. And in Arkin’s story — which seems like it was meant to be a comment primarily on the political blowback from the search — a headline Arkin probably didn’t write calls this person “an informer” (notably, language Arkin likely did have some say over also called it a raid, which credible DOJ sources would never do).

Exclusive: An Informer Told the FBI What Docs Trump Was Hiding, and Where

The raid on Mar-a-Lago was based largely on information from an FBI confidential human source, one who was able to identify what classified documents former President Trump was still hiding and even the location of those documents, two senior government officials told Newsweek.

There are other parts of this story that raised real credibility questions for me and for multiple counterintelligence experts I spoke with about. For example, it describes a 30-year veteran of the FBI, now a senior DOJ official, sharing grand jury information. Because Special Agents retire after 25 years, there are a very small number of 30-year FBI veterans running around, and describing the person as a senior DOJ official to boot would pinpoint the source even further. If this person really had knowledge of grand jury proceedings, it would be child’s play to charge them based on this story for violating laws prohibiting such things. Plus, the person doesn’t even describe what happens in a grand jury accurately, suggesting that the grand jury had “concluded” the law was broken (in which case there would be an indictment).

Moreover, the story relies on public reporting, based off Trump’s lawyer’s own claim, for its evidence that DOJ knew precisely where to look.

According to news reports, some 10-15 boxes of documents were removed from the premises. Donald Trump said in a statement that the FBI opened his personal safe as part of their search. Trump attorney Lindsey Halligan, who was present during the multi-hour search, says that the FBI targeted three rooms—a bedroom, an office and a storage room. That suggests that the FBI knew specifically where to look.

That claim is fundamentally incompatible with the earlier report that an “informer” had told FBI precisely where to look.

More importantly, it wouldn’t take an informant — a confidential human source infiltrated into the Trump camp — to obtain this kind of information.

Cassidy Hutchinson, who helped Trump move to Mar-a-Lago, reportedly “cooperated” (that word again!) with DOJ after her blockbuster testimony before the January 6 Committee. She worked at Mar-a-Lago and unlike others who moved with Trump to Florida, had the clearance to handle these documents. Her attorney, former Assistant Attorney General Jody Hunt, knows firsthand about Trump’s attempts to suppress sensitive classified information from his attempts to kill the Russian investigation. So if Hutchinson had information that would be useful to this investigation (including details about where Trump stored what at Mar-a-Lago), DOJ likely has it.

Similarly, of the seven people whom Trump named to represent his interests with the Archives, three — Pat Cipollone, Pat Philbin, and Steve Engel — have been willing to testify with varying degrees of resistance before the January 6 Committee. Engel would have likewise been asked to cooperate on any DOJ investigation of Jeffrey Clark, but he didn’t share details of that with the press. The two Pats both recently received subpoenas in DOJ’s January 6 probe (which they did share with the press). And Pat Philbin is likely the lawyer described in earlier reports who attempted, but failed, to negotiate transfer of Trump’s stolen documents to the Archives.

Longtime Archives lawyer Gary Stern first reached out to a person from the White House counsel’s office who had been designated as the President Records Act point of contact about the record-keeping issue, hoping to locate the missing items and initiate their swift transfer back to NARA, said multiple sources familiar with the matter. The person had served as one of Trump’s impeachment defense attorneys months earlier and, as deputy counsel, was among the White House officials typically involved in ensuring records were properly preserved during the transfer of power and Trump’s departure from office.

But after an extended back and forth over several months and after multiple steps taken by Trump’s team to resolve the issue, Stern sought the intervention of another Trump attorney last fall as his frustration mounted over the pace of the document turnover.

If Philbin was the person who tried but failed to resolve the Archives’ concerns, he is a direct, material witness to the issue of whether Trump had willfully withheld classified documents the Archives was asking for, something the Archives would have made clear in its referral to DOJ. And because of the way the Espionage statute is written (note the Newsweek article, if accurate, mentions National Defense Information, language specific to the Espionage Act), Philbin would have personal legal exposure if he did not fully disclose information about Trump continuing to hoard stolen classified documents. Plus, Philbin has been involved in national security law since the 00s, and probably would like to retain his clearance to represent clients in national security cases.

All of which is to say that DOJ has easily identifiable people who are known to be somewhat willing to testify against Donald Trump and who are known to have specific knowledge about the documents he stole. If either Hutchinson or Philbin (or both!) answered FBI questions about Trump’s document theft, they would not be “informants.” They would be witnesses. Just like they’re both witnesses to some of Trump’s other suspected crimes.

Nor does that make them “cooperators” in the stricter sense — people who’ve entered into plea agreements to work off their own criminal liability.

As remarkable as six years of Trumpism has made it seem, sometimes law-abiding citizens answer FBI questions without the tantrums that Corcoran seems to tolerate from his clients.

Indeed, if the crime that FBI is investigating really is as serious as the Espionage Act, far more witnesses may see the wisdom of sharing their information with the FBI.

Update: Propagandist John Solomon offers a version of the same story as WSJ, though in his telling, DOJ also subpoenaed Trump in June, specifically asking for documents with classified markings, including those involving correspondence with foreign officials.

The subpoena requested any remaining documents Trump possessed with any classification markings, even if they involved photos of foreign leaders, correspondence or mementos from his presidency.

This is the kind of detail that the lawyers who negotiated initial efforts to retrieve stolen documents would know about. If Philbin, for example, knows that Trump had tried to hold onto his love letters with Mohammed bin Salman and Vladimir Putin, but Trump still didn’t provide them in response to a subpoena, then there’d be a clearcut case of withholding classified documents.

Update: CNN has matched Solomon’s report.

Trump and his lawyers have sought to present their interactions with Justice Department prosecutors as cooperative, and that the search came as a shock. The subpoena was first reported by Just the News.

In response to questions about the grand jury subpoena, Trump spokesman Taylor Budowich said in a statement to CNN: “Monday’s unprecedented and absolutely unnecessary raid of President Trump’s home was only the latest and most egregious action of hostility by the Biden Administration, whose Justice Department has been weaponized to harass President Trump, his supporters and his staff.”

But CNN’s version suggests that Trump’s lawyers showed the head of the espionage division of DOJ classified documents, but only agreed to hand over those that were Top Secret or higher.

During the meeting, Trump’s attorneys showed the investigators documents — some of them had markings indicating they were classified. The agents were given custody of the documents that were marked top secret or higher, according to a person familiar with the matter.

That suggests even after turning over 15 boxes of documents, Trump still had highly classified documents lying around the basement of a building riddled with counterintelligence concerns. And when the head of the espionage department came to collect classified documents, Trump withheld less classified ones.

Of course they had probable cause there were classified documents still at Mar-a-Lago. Trump’s lawyers told DOJ there were.


Expected Response is Expected: Trump and Right-Wing DARVO

[NB: check the byline, thanks. /~Rayne]

We could have seen it coming after all this time. They’re reliably predictable, no crystal ball required.

Trump appears to be in trouble: The FBI serves a warrant on Mar-a-Lago, seizing papers.

There’s a moment of hesitation or pause: Trump delivers a ranty statement some time after the FBI leaves.

The coordinated response is generated: Trump’s lawyers make a false claim about evidence being planted by FBI.

The zone is flooded: The right-wing’s proxies and media repeat ad nauseam the same false claim.

The media dutifully picks up and repeats: the zone is further flooded, amplifying the false claim.

This is a cycle we’ve seen repeated over and over again. The only additional step not included here is the final one in which some pundit will opine about this situation being bad for Democrats and Joe Biden though it has nothing to do with them whatsoever.

By now you’d think the media would have cottoned on they are used in this scenario like so much facial tissue — but no. They are as reflexive as the right-wing ecosphere itself, almost as if an adjunct.

Trump and his right-wing soldati ring the Pavlovian bell and the corporate media comes slobbering for an easy bone to chew.

What’s just as reliable and not yet recognized is the pattern within this reflexive call and response.

We shouldn’t be surprised that a man with a long history of sexual abuse behaves in other aspects of his life like an abuser – that is to say, when under pressure, Trump automatically reverts to DARVO.

We’ve discussed this behavior pattern before. DARVO is an acronym for a common strategy frequently employed by abusers when confronted with their abuse:

Deny the Attack, Reverse Victim and Offender

The FBI’s warrant and document seizure at Mar-a-Lago confronted Trump’s abuse of presidential records.

Trump and his soldati Denied the abuse he committed;

Trump Attacked the FBI who were tasked with serving the warrant;

Trump Reversed the roles of Victim and Offender by complaining he was abused by this warrant.

Look at his statement published shortly after the FBI finished executing their warrant on Mar-a-Lago:

Red = reversed offenders

Orange = attacks on reversed victim

Yellow = secondary reversed victims

There are so many efforts in this short memo to frame himself as a primary victim and the right-wing including the GOP as a secondary victim; there are numerous efforts to frame the FBI, DOJ, Democrats and even Hillary Clinton as attackers and offenders.

Trump goes so far to frame himself as a victim that he even avoids denying directly the reason why the FBI was at Mar-a-Lago. It’s as if the warrant had a miraculous virgin birth.

There’s no mention of documents he had taken and refused to return to the National Archives’ possession, only that his safe had been broken into after “working and cooperating with the relevant Government agencies.” (Even the word government is capitalized as if a proper noun; is the entire government an attacker/offender along with its subset FBI and Justice System?)

Trump invests heavily in whataboutism to redirect from whatever it was which caused the mysterious attack by federal law enforcement and the Democrats.

If anybody had done something wrong besides attacking poor Trump and his beautiful Mar-a-Lago (which local ordinance says he’s not allowed reside in as a home), Trump points to unelected-nowhere-near-Florida Hillary Clinton, awarding an entire paragraph to establish her as another offender.

~ ~ ~

The right-wing ecosphere duplicated the entire DARVO pattern:

The lawyers, proxies, and right-wing media denied Trump did anything wrong;

The same entities attacked the FBI, some calling for defunding of the DOJ and FBI;

The same folks reverse Victim-Offender by claiming falsely the warrant was a political attack on Trump.

The lawyers and proxies add an additional fillip, though; they claim the FBI’s attack on Trump included planted evidence. This happens over and over again, to the point of ridiculousness. Thankfully @Acyn and @atrupar caught quite a few of them:

Trump’s lawyer on site at Mar-a-Lago Christina Bobb

Trump’s other lawyer Alina Habba

Fox News’ Jesse Watters (and again this evening)

Senator Lindsey Graham (R-SC)

Senator Rand Paul (R-KY)

Rep. Marjorie Taylor Greene manages a double by both claiming evidence (with scare quotes) was planted while promoting Trump’s false “planting” frame:

These aren’t all of the times in last +24 hours in which a right-wing personality falsely claimed the FBI planted evidence during its execution of the warrant. This flood of falsity is intended to provide plausible deniability when evidence of Trump’s violations of the Presidential Records Act and unlawful possession of classified information are revealed, likely in a redacted indictment if not the original affidavit prepared before the warrant.

It’s also intended to taint a future jury pool. Who will escape hearing about this planted evidence given how deeply and widely this bullshit has been repeated?

~ ~ ~

The pattern had additional amplification from sources which should damned well know better, like the Washington Post:


(link to archived version: https://web.archive.org/web/20220810111246/https://twitter.com/dkiesow/status/1557323903034445824)

It was difficult to keep track of the numerous academics in journalism studies who were greatly disappointed with the Washington Post:

WaPo later removed the tweet but only after a massive outcry including thousands of tweets about it which caused the subject to trend on Twitter.

They fell right into it, which is absolutely unacceptable for credible news media — especially an outlet which purports to be pro-democracy.

Perhaps WaPo’s masthead should say Democracy Dies for Lack of Self Awareness.

~ ~ ~

We don’t need psychic powers to know what’s ahead.

Assuming one of the many investigations in progress finally catches up with the former president — most especially this one related to possible violations of the Presidential Records Act and mishandling of classified information — an indictment will be issued for Donald J. Trump.

The DARVO pattern will begin all over again, this time with a new fillip or a shout out to new partisans as co-victims.

But DARVO it will be.

Remember who the offender is, and that the United States and its Constitution are the victims.


DOJ’s June Mar-a-Lago Trip Helps Prove 18 USC 793e

Everyone is squabbling over whether DOJ should release more information on the search of Mar-a-Lago, with entirely reasonable people saying they want DOJ to have to defend taking documents the government owns so we can learn more about what went down.

But we may get more clarity more easily than that. That’s because, if DOJ has any intention of actually charging Donald Trump for stealing classified information, then obtaining specific documents he stole may be one of the last things they need to do before charging him.

As I noted here and here, one of the statutes that’s likely on the table for the Former President is 18 USC 793(e), basically taking national defense information you’re not authorized to have and refusing to give it back.

Whoever having unauthorized possession of, access to, or control over any document, writing, code book, signal book, sketch, photograph, photographic negative, blueprint, plan, map, model, instrument, appliance, or note relating to the national defense, or information relating to the national defense which information the possessor has reason to believe could be used to the injury of the United States or to the advantage of any foreign nation, willfully communicates, delivers, transmits or causes to be communicated, delivered, or transmitted, or attempts to communicate, deliver, transmit or cause to be communicated, delivered, or transmitted the same to any person not entitled to receive it, or willfully retains the same and fails to deliver it to the officer or employee of the United States entitled to receive it;

Regular readers of this site are familiar with this statute because I’ve covered tons of cases charging it: Reality Winner and Hal Martin and Joshua Schulte, among others.

But I went back and found some pattern jury instructions for the unlawful retention charge, and because of that meeting in June, DOJ has most of what they’d need to charge the Former President.

Here’s what jurors would be asked to decide:

Did the defendant, without authorization, have possession of, access to, or control over a document that was National Defense Information?

Yes. The Archives spent a year telling him he was not authorized to have it under the Presidential Records Act.

Did the document in question relate to the national defense?

We don’t know what the documents in question are, but given WaPo’s description in February, then absolutely.

Bonus fact: The jury decides if something was NDI, not the former Original Classification Authority (the fancy term for, “the President gets to decide whether something is classified or not”). So if the agency whose document Trump stole is still trying to protect it from hostile powers, if that agency still believes it is classified, if it remains secret, then a jury is likely to find that it’s NDI.

Did the defendant have reason to believe the information could be used to the injury of the United States or to the advantage of any foreign nation?

Trump is such a psychopath that the answer to this might normally be in question. After all, he routinely treated top secret intelligence like it was toilet paper or party favors for visiting Russians.

Except DOJ went to Trump’s residence in June and told him this information could harm the US. Then they wrote him a letter, saying that it could harm the US and could he please put a padlock on the basement room that had, up until that point, been accessible to all the suspected foreign assets who’ve paid the price of admission to Mar-a-Lago.

Did the defendant retain the above material and fail to deliver it to the officer or employee of the United States entitled to receive it?

Yes! The Archives asked and asked and asked. And then DOJ went to his home and asked again!

Did he keep this document willfully?

Yup. Again, DOJ asked and asked and asked. Trump exhibited awareness the Archives were asking. He stopped in to say “hi!” when Jay Bratt, the head of DOJ’s espionage section, came to visit. And he still hoarded the document.

This may be why Trump claims that nothing was in the hotel safe in his bridal suite, by the way. Keeping these documents at Mar-a-Lago was willful by itself. But keeping such documents in his safe would be proof that he, personally, was hoarding it.

If the FBI really did scoop up highly sensitive documents when they were at Mar-a-Lago the other day, then there may be relatively few steps left to charging him — aside from cataloging the 12 new boxes of stolen documents. DOJ may only need permission from the agencies that own these documents to make the declassifications required to prosecute it.

By going to Mar-a-Lago and asking for these documents in person on June 3, DOJ made it very easy to prove that Trump had been asked, but refused, to give any classified documents found in Trump’s possession on Monday back.

Update: Here’s an indictment from the 793 case that’s most similar to the evidence that may be present with Trump. Hal Martin kept taking highly classified documents home from CIA and NSA, just like Trump took documents home. In Martin’s case, they charged him for 20 documents out of the great swath of documents he stole. He ultimately pled guilty. With good behavior he might get released next April.


The Likely Content of a Trump Search Affidavit

Even Trump supporters are beginning to call on him to release the warrant used to search Mar-a-Lago Monday. In spite of serving as a source for multiple outlets yesterday, the lawyer who received the warrant, Christina Bobb, has refused to turn it over.

She’s probably refusing for several reasons. First, it’s likely that 18 USC 793 is among the suspected crimes cited on the warrant. If Trump admitted he’s under investigation for part of the Espionage Act, his supporters might be less likely to prepare for civil war, as they currently are doing. Plus, given the inconsistent numbers of boxes seized in Bobb-sourced stories (the WSJ reported at least 10 boxes were seized, Politico and WaPo reported that 12 were), it suggests the search warrant return is far more detailed than just listing boxes of stolen documents, but instead lists individual documents.

If the return looked something like, [and to be clear, this is strictly hypothetical, and my “yaddayadda” is a fake compartment name] …

  1. Single existing copy of transcript of phone call between President Donald Trump and Ukrainian President Volodymyr Zelenskyy, July 25, 2019, TS/SCI/SAR-YADDAYADDA/NF
  2. Single existing copy of hand-written notes of meeting between President Donald Trump and Russian President Vladimir Putin, July 16, 2018, TS/SCI/SAR-YADDAYADDA/NF
  3. Transcript of NSA intercept of Saudi intelligence official in advance of Turkey operation involving Jamal Khashoggi, September 29, 2018, TS/SCI/SAR-YADDAYADDA/NF
  4. NSA targeting list for Russia, dated January 15, 2021, TS/SCI/SAR-YADDAYADDA/NF (see this post)

…Then the gravity of Trump’s crime would become immediately apparent.

Plus, Bobb didn’t receive the most interesting part of it, the affidavit the FBI used to obtain the search warrant.

So I wanted to write up what an affidavit would likely include, based on the public understanding of the investigation.

For comparison, here are the warrants for Reality Winner and Josh Schulte, both of which were also, at least in part, warrants for a 793 investigation. Here are warrants to search Roger Stone and Oath Keeper Jeremy Brown’s houses, both Federal searches in Florida related to investigations conducted in DC (the search of Brown’s house even found allegedly classified documents, albeit only at the Secret level). Here’s the warrant Robert Mueller’s team used to get Michael Cohen’s Trump Organization emails from Microsoft.

Cover Page

The cover page would include the address to be searched, 1100 S. Ocean Blvd, Palm Beach, FL. It would name the magistrate docket for the warrant, 9:22-mj-08332, references to Attachment A describing the premises to be searched, and Attachment B, the description of things to search for, as well as the Affidavit.

It would have checkboxes checked, listing that the search was for evidence of a crime and to retrieve contraband.

It would list the crimes under investigation — according to public reports, probably 40 USC 2201-2209, 18 USC 2071, and 18 USC 793.

It would be dated and signed by Magistrate Judge Bruce Reinhart.

Attachment A

Attachment A would include a description of Mar-a-Lago, probably with a nifty picture of the garish resort, possibly also pictures of the basement storage area that investigators saw in their June visit. It would likely mention Trump’s hotel safe in the bridal suite.

Attachment B

Attachment B would authorize seizure of all documents relating to violations of the statutes in question, so probably 40 USC 2201 and 18 USC 793, with bullet points stemming from what is covered under the PRA and what is covered — defense information — under the Espionage Act.

No computer files were described to have been seized, so it would consistent entirely of paper seizures.

Affidavit

This would include:

  • Several paragraphs describing the affiant’s background and training
  • An assertion that the affiant believed there was probable cause for the subject offenses
  • The statutory language, basically a cut-and-paste describing the elements of the offense
  • Language about classification, including the various levels of classification
  • Language about Presidential Records
  • Language about 32 CFR sections 2001 and 2003, which cover the storage of classified information

Then there’d be a probable cause section that would include:

  • A description of who is under investigation (whether it’s just Trump, or whether his staffers are as well)
  • A reference to the Archive’s February 2022 request that DOJ investigate Trump’s document theft
  • Background on the year-long effort leading up to the Archives’ request to get Trump to return stolen documents, including the specific records the Archives identified that Trump had withheld (CNN has a timeline here)
  • Other evidence of Trump’s refusal to abide by Presidential Records Act
  • Other evidence of Trump’s failures to protect classified information (particularly if FBI knows of any instances from after he left the presidency)
  • The outcome of the investigation into Mike Ellis’ efforts to retain highly sensitive NSA documents at the White House as staffers were packing boxes
  • The Archives’ three statements on the effort to obtain the documents
  • A description of what aides told the FBI in interviews about the stolen documents in April and May
  • Testimony about efforts to keep uncleared staffers from accessing boxes that included classified information
  • A description of the May subpoena to the Archives for the classified documents stolen
  • A summary of the classified documents found in the 15 boxes turned over last year, possibly with examples of the most sensitive documents
  • Some explanation of why DOJ believes that these documents weren’t actually declassified by Trump before he stole them
  • A description of the June 3 meeting at Mar-a-Lago, which show three really key parts of the probable cause:
    • Acknowledgement from Trump lawyers that he remained in possession of stolen documents
    • A description of things the lawyers said that proved Trump was treating these as classified documents
    • A description of the storage location in the basement, including why it did not meet the standards for storage of classified documents
    • Possibly a description of documents seen on that visit that would qualify as potentially classified Presidential Records
  • A description of the letter asking Trump to better secure the documents
  • A description of the subpoena for surveillance footage from Mar-a-Lago, including anything suspicious on it
  • A list of known Presidential Records that had not yet been shared with the Archives

The affidavit would explain why the items being searched for are necessary to investigate the crime, which would explain:

  • FBI needed to obtain the documents to see if they were Presidential Records not otherwise shared with the Archives
  • FBI needed to obtain the documents to see if they were defense information
  • DOJ needed to secure the documents because they are all the property of the Archives

Finally, the affidavit would include a conclusion stating that all this amounts to probable cause that Trump was in possession of documents that were covered by the PRA, some subset of which were believed to be classified.


All Republican Gang of Eight Members Condone Large-Scale Theft of Classified Information, Press Yawns

The Ranking Member of the Senate Intelligence Committee went on a four tweet rant yesterday, complaining that the FBI is conducting an investigation into the suspected large-scale theft of highly-classified materials.

The House Minority Leader used the instance of a lawfully executed warrant in support of a national security investigation to call for an investigation not into the man suspected of stealing code word documents, but instead, of Attorney General Merrick Garland for authorizing this investigation into a classified breach.

The Ranking Member of the House Intelligence Committee, Mike Turner, more appropriately asked for a briefing, but even after admitting he hadn’t had one yet and claiming (dubiously) that he didn’t know of the suspected massive theft of highly classified information, scoffed at the seriousness that such a large-scale compromise of classified information might cause.

Mitch McConnell weighed in, belatedly, to demand transparency about an investigation into stolen secrets.

The country deserves a thorough and immediate explanation of what led to the events of Monday. Attorney General Garland and the Department of Justice should already have provided answers to the American people and must do so immediately

These men are all entrusted with the protection of Americans intelligence secrets. But when faced with a choice of putting party or America’s security first, they immediately rushed to protect their party, even while admitting they don’t know the facts of the underlying investigation.

And in spite of the fact that these men have all engaged in minimizing the large-scale compromise of classified information with their rants, virtually every press outlet has reported their comments as more horse race journalism, one side against the other, as if top Republicans attacking the FBI for trying to protect classified secrets is not itself newsworthy.

The lazy-ass press couldn’t even be bothered to show how all these men, especially Marco Rubio, made wildly inconsistent statements when Jim Comey or Hillary Clinton were suspected of mishandling far less sensitive intelligence. Nor did the press bother asking these men about the destruction of DHS (including Secret Service) and DOD records that Congress itself had already asked for before magnifying their comments.

They just let these men turn this into a partisan fight rather than a serious legal investigation, all for free!

Update, 8/10PM: Included Mitch McConnell’s statement.


While Trump Was Secretly Loading Up Documents, Mike Ellis Was Hoarding an NSA Document at the White House

The WaPo continues to own the story of the Archives’ efforts to reclaim documents removed from the White House by Donald Trump. Yesterday, they reported that some of the documents Trump absconded with were marked as classified, including Top Secret.

Some of the White House documents that Donald Trump improperly took to his Mar-a-Lago residence were clearly marked as classified, including documents at the “top secret” level, according to two people familiar with the matter.

The existence of clearly marked classified documents in the trove — which has not previously been reported — is likely to intensify the legal pressure that Trump or his staffers could face, and raises new questions about why the materials were taken out of the White House.

While it was unclear how many classified documents were among those received by the National Archives and Records Administration, some bore markings that the information was extremely sensitive and would be limited to a small group of officials with authority to view such highly classified information, the two people familiar with the matter said.

But the more interesting part of WaPo’s latest is a description of Trump packing up boxes without letting his closest aides look at them (I take this to mean the repacking at Mar-a-Lago).

It is not precisely clear who packed up the classified materials at Mar-a-Lago, or how they got there in the first place. Trump was very secretive about the packing of boxes that were retrieved from Mar-a-Lago last month, and did not let other aides — including some of his most senior advisers — look at them, according to people close to him.

As this story has been snowballing, I can’t get a detail from the IG Report on White House Counsel Mike Ellis’ aborted hiring as NSA General Counsel out of my head.

The DOD IG found that Ellis’ hiring itself wasn’t a problem. But it also found that NSA Director Paul Nakasone correctly responded by holding up the process when Ellis was involved in two security incidents in the days after January 6. In both cases, Ellis was treating NSA information improperly.

First Security Incident

An NSA employee received a controlled, classified NSA notebook of documents on January 7, 2021, from a Department of State official who was not authorized to access that information. An initial NSA review further found that several copies of the notebook had been produced without NSA authorization. This event raised concerns that other individuals possessed copies of these sensitive materials without NSA authorization.

[NSA Deputy Director George] Barnes told us that “[they] were spending the last week or so of the administration trying to find out who had them, where they were, and trying to get them back into positive control before the administration members left.” NSA officials received information on January 13, 2021, that Mr. Ellis either created or directed the copying of these notebooks of documents with compartmented, classified information without NSA knowledge, consent, or control.

Second Security Incident

On January 8, 2021, an NSA employee tried to retrieve an NSA document from Mr. Ellis that contained information of a classified, controlled, compartmented NSA program “of some of the most sensitive information that NSA possesses.” Mr. Barnes told us that Mr. Ellis refused to return the document, retained it for the White House archives, and, based on what the NSA employee saw, placed the document in a container that did not meet the security storage requirements for such a sensitive program. Mr. Barnes told us that he contacted Mr. Eisenberg on January 9, 2021, for help obtaining the document, and the document was returned to the NSA on January 14, 2021. Mr. Barnes said, “The White House people were all leaving so every day new members were leaving and so we were prioritizing on identifying our documents that needed to be brought under positive control and accounted for.” [italicized brackets and bold mine]

When Nakasone was asked about this by the IG, he explained that the intelligence deals with a particular foreign actor.

I learned … that we had questions about the way that Mr. Ellis had handled our most sensitive intelligence that deals with a foreign actor when he was in the White House. … and I’m not able to get the actual full details until that Tuesday [January 19]. … I’m … growing concerned… I have an OGC that I’ve said is okay to be hired, now we have concerns about his clearance. We have concerns about merit. We have concerns about an ongoing inquiry by the DoD IG. And so, my sense was … let’s get this all resolved… before he actually becomes the General Counsel for the National Security Agency. [emphasis mine]

So at precisely the time when Trump was packing up documents to take with him, in the wake of his failed coup attempt, Mike Ellis was refusing to return an NSA document from the White House.

And the NSA’s concerns, even then, pertained to the possibility that White House staffers would move on and these documents would disappear.

Update: TF reminded me that in December 2020 (so during the period when Ellis’ nomination was pending), Mike Flynn and friends came up with a scheme to use NSA data to try to prove foreign interference in the election, one that Mike Lindell was trying to implement in January.

The memo used the banal language of government bureaucracy, but the proposal it advocated was extreme: President Donald Trump should invoke the extraordinary powers of the National Security Agency and Defense Department to sift through raw electronic communications in an attempt to show that foreign powers had intervened in the 2020 election to help Joe Biden win.

Proof of foreign interference would “support next steps to defend the Constitution in a manner superior to current civilian-only judicial remedies,” argued the Dec. 18, 2020, memo, which was circulated among Trump allies.

The document, a copy of which was obtained by The Washington Post, laid out a plan for the president to appoint three men to lead this effort. One was a lawyer attached to a military intelligence unit; another was a veteran of the military who had been let go from his National Security Council job after claiming that Trump was under attack by deep-state forces including “globalists” and “Islamists.”

[snip]

[North Dakota Senator Kevin] Cramer said Del Rosso sent the memo to his office after a Jan. 4 meeting that both men attended at the Trump International Hotel, which was organized by MyPillow chief executive Mike Lindell, a prominent backer of Trump’s bogus election fraud claims.

Cramer and Sen. Cynthia M. Lummis (R-Wyo.) joined some two dozen others crammed into a ground-floor hotel conference room to discuss election fraud allegations, according to Cramer and an aide to Lummis. Participants recalled that Johnson also attended, via videoconference. The details of the meeting, which took place two days before the attack on the U.S. Capitol, have not been previously reported. The meeting was similar to a briefing held in a congressional office building the next day for members of the House.

Michael Flynn, who resigned in 2017 as Trump’s national security adviser and had advocated using the military to “rerun” the election in battleground states, also extended an invitation to at least one senator and his staff, according to a person familiar with the meeting. Flynn did not respond to requests for comment.

 


Paul Nakasone’s Concerns about Mike Ellis Hiring Vindicated

DOD Inspector General released a report yesterday finding there was no evidence of impropriety in the hiring of Michael Ellis as General Counsel, but also suggesting that NSA Director Paul Nakasone was vindicated in his concerns about Ellis’ hiring. DOD IG made those conclusions without succeeding in getting Pat Cipollone — who might know a back story to Ellis’ hiring — to sit for an interview about his role in the process.

The hiring process

As the report lays out, Ellis was one of 29 candidates who were deemed qualified for the position to apply in early 2020. An initial vetting process did not work as one of the participants said it had in the past, partly because of how the panel considered the technical requirements, partly because they did not conduct interviews. But by all accounts Ellis was deemed one of the top seven candidates, and so qualified for the position.

In the next round, just three people were reviewed, including Ellis. Several of the three panel members deemed a different candidate to have had an exceptionally good interview, but all agreed Ellis did quite well and that it was a close decision.

After that DOD General Counsel Paul Ney, who had selection authority, chose Ellis. When asked why he preferred Ellis, he cited Ellis’ more extensive Intelligence Community experience and his experience both on the Hill (where he wrote dodgy reports for Devin Nunes) and in the White House (where he ran interference for Trump), though there’s no evidence Ney understood Ellis’ role on those bodies. Ney told DOD IG that he had several calls with John Eisenberg and one with Pat Cipollone where the lawyers spoke favorably of Ellis during the hiring process, but he did not regard those as being an attempt to pressure him.

The law requires that the NSA Director be consulted in this process. After the decision was made, Nakasone conducted interviews and decided that the same candidate who had had the exceptionally good interview would best manage the 100-person General Counsel department at the NSA. He also shared concerns with Ney about the way that Ellis had done the classification review of John Bolton’s book (probably reflecting that Ellis was pursuing a political objective on that front). Nevertheless, Ney picked Ellis, and after the election, his hiring was announced.

As the transition wore on and Congress got involved, Nakasone raised concerns about whether the Office of Personnel Management had done an adequate review of the hiring of a political appointee. The review is not required (the IG Report recommended that it be required going forward), and was not used with Obama’s General Counsels Raj De and Glenn Gerstell either. On January 15, Nakasone attempted to stall the on-boarding process, citing the OPM review and concerns from Congress. But then Ney got Christopher Miller to order Nakasone to hire Ellis by the end of the following day, which Nakasone did.

After that (but before the inauguration), Nakasone learned of two security incidents involving Ellis, and based on that and the ongoing IG investigation, put the newly hired General Counsel on leave.

The Eisenberg and Cipollone calls

The IG Report considered whether in calls from John Eisenberg and Pat Cipollone, they inappropriately influenced Ney. It credibly shows they did not. That’s true, first of all, because the IG Report makes it clear that Ney had regular interactions with Eisenberg, Ellis, and Cipollone. Ellis’ bosses at the White House wouldn’t have needed to push him — he was a known figure to Ney.

Eisenberg’s positive comments were credibly described as a supervisor expressing positive comments about someone.

When we asked Mr. Eisenberg about the rationale for his comments to Mr. Ney, he told us,“I would not have been happy with myself if somebody who … works so hard for me, that I … couldn’t be bothered to basically give a recommendation before somebody makes a decision.” Mr. Eisenberg told us, “[T]here’s nothing inappropriate about … somebody from the White House in an appropriate context, providing an evaluation of their employee.”

The IG Report doesn’t describe (and it would be beyond its scope) that Eisenberg played a central role in some key cover-ups for Trump, the most notable of which was Trump’s attempt to coerce election assistance from Ukraine. Ellis was a part of those cover-ups (indeed, that’s arguably what the Bolton classification review was). Eisenberg also played a key role, way back in 2008, in withholding information from FISC for the first programmatic review of PRISM.

That is, a recommendation from Eisenberg is a recommendation from someone who did questionable things to protect the President, often with Ellis’ help. John Eisenberg is a very credible, experienced national security lawyer. He’s also someone who helped Trump undermine democracy.

Still, the IG Report credibly describes this as the normal kind of comment that a supervisor would make. It’s only important given who the supervisor was and what the supervisor had asked Ellis to do in the past.

I’m rather interested, however, that Cipollone blew off DOD IG’s request for information.

Shortly after interviewing Mr. Ney on March 15, 2021, we attempted to contact Mr. Cipollone. He did not respond; however, his assistant responded on July 12, 2021, and we asked to interview Mr. Cipollone. Neither Mr. Cipollone nor his assistant provided any response to our request. Based on the witness testimony and documents we reviewed, we determined that Mr. Cipollone likely did not have any additional information different from what we obtained from other sources, and we decided, therefore, not to further delay our review waiting for a response from Mr. Cipollone or his assistant.

Cipollone had no legal obligation to cooperate, and DOD IG had no legal means to coerce him to do so. But he’s also the kind of person who would know better than to get himself in an interview where he might have to reveal other pertinent details. For whatever reason, he just blew off the request.

In the days after January 6, Ellis was discovered to have two security violations

After determining, credibly, that Ellis was legally hired, DOD IG then considered whether Ellis was legally put on leave as soon as he was hired. The analysis involves the discovery of two security violations on January 7 and January 8, as laid out in this table.

In the first incident, NSA discovered that Ellis had put together and shared notebooks of documents of “compartmented, classified [NSA] information” without NSA knowledge or consent.

An NSA employee received a controlled, classified NSA notebook of documents on January 7, 2021, from a Department of State official who was not authorized to access that information. An initial NSA review further found that several copies of the notebook had been produced without NSA authorization. This event raised concerns that other individuals possessed copies of these sensitive materials without NSA authorization.

[NSA Deputy Director George] Barnes told us that “[they] were spending the last week or so of the administration trying to find out who had them, where they were, and trying to get them back into positive control before the administration members left.” NSA officials received information on January 13, 2021, that Mr. Ellis either created or directed the copying of these notebooks of documents with compartmented, classified information without NSA knowledge, consent, or control.

In the second, more alarming instance, two days after Trump’s coup attempt, an NSA employee tried to retrieve “some of the most sensitive information that NSA possesses” from Ellis, only to discover he was storing it with inadequate security and refusing to return it. (After DDIRNSA Barnes asked for help from Eisenberg, NSA got the information back.)

On January 8, 2021, an NSA employee tried to retrieve an NSA document from Mr. Ellis that contained information of a classified, controlled, compartmented NSA program “of some of the most sensitive information that NSA possesses.” Mr. Barnes told us that Mr. Ellis refused to return the document, retained it for the White House archives, and, based on what the NSA employee saw, placed the document in a container that did not meet the security storage requirements for such a sensitive program. Mr. Barnes told us that he contacted Mr. Eisenberg on January 9, 2021, for help obtaining the document, and the document was returned to the NSA on January 14, 2021. Mr. Barnes said, “The White House people were all leaving so every day new members were leaving and so we were prioritizing on identifying our documents that needed to be brought under positive control and accounted for.” Mr. Barnes added:

And then we started to get the pressure on the 15th is when Acting SecDef ordered us to issue a job offer to him. And so, in that intervening several days, all’s we knew his [sic]is we have a problem, we have to investigate the nature of how these documents were handled, distributed outside of our purview and control. And so that was—the flares were up but we didn’t have time to actually do anything yet and Mr. Ellis was not our employee so we didn’t have a chance to contact him yet for questioning for anything. We had to get security involved to do it right whenever we do an investigation because we didn’t know if there was a disconnect or an understanding that so these were just—the flares went up on the 7th and the 8th.

Effectively, at a time when NSA was trying to ensure that outgoing Trump officials didn’t walk out with NSA’s crown jewels, they learned that Ellis wanted to keep the crown jewels on White House servers.

Importantly, two aspects of these violations repeat earlier concerns about Ellis’ tenure: He shared information with people (like Nunes) not authorized to have it, and that he and Eisenberg played games with White House servers to avoid accountability. And while it’s not clear why Ellis was violating NSA’s security rules, it does seem of a part of his efforts to politicize classification with the John Bolton review.

DOD IG found that it was not proper to put Ellis on leave based on the then-ongoing IG investigation. But it did find Nakasone’s decision to put Ellis on leave was proper based on Nakasone having control over Ellis’ clearance.

The investigation into Ellis’ security violations appears to have ended when he resigned in April. The IG Report includes a recommendation that it be reconsidered.

The Office of the Undersecretary of Defense for Intelligence and Security should review the allegation and supporting material that Mr. Ellis improperly handled classified information on two occasions to determine what, if any, further actions the NSA or another agency should take regarding this allegation.

It’s possible, though, that this investigation didn’t go further for a different reason. That’s because the President is ultimately the Original Classification Authority for the entire US government. If Ellis was distributing these notebooks and withholding the NSA crown jewels based on Trump’s authorization, it wouldn’t be a violation at all.

That said, that seems reason enough to chase down why he did those things.


WikiLeaks and Edward Snowden Champion Sociopathic Liars and Sloppy Thinking

WikiLeaks boosters have embraced a really bizarre new entry in the propaganda case to support Julian Assange this weekend: An article by two Icelandic journalists that purports to prove that, “The veracity of the information contained [in the June 2020 superseding indictment against Julian Assange] is now directly contradicted by the main witness, whose testimony it is based on.” This is an article about Sigurdur Ingi Thordarson, AKA Siggi, the sociopath that Assange chose to hang out with for a period in 2010 to 2011, who does have a role but by no means the “main” role in the case against Assange. The journalists who wrote the article present as credible Siggi’s claim, from someone that everyone agrees is a pathological liar, that he’s telling the truth now, rather than when he testified to US authorities in 2019.

The journalists who wrote the article and all the WikiLeaks boosters who have embraced it are arguing that the article somehow proves that an avowed liar is telling the truth now about lying in the past. Even as WikiLeaks boosters are pointing to the Icelandic legal judgment that Siggi is a sociopath, they are once again welcoming him into the WikiLeaks fold because the avowed liar claims to have lied.

This is what Assange’s boosters are now staking his defense on: convincing you to accept the words of liars as truth.

Except, Siggi retracts nothing substantive that is alleged in the indictment, so this drama is instead a demand that you accept the word of a liar rather than read the documents to show that the liar’s claims are irrelevant to the charges against Assange.

The article proves it doesn’t understand US law

Before I get into how little of what the article presents even relates to the indictment, let me show how badly the authors misunderstand (or misrepresent) US law. The last eight paragraphs of the article insinuate that, because US prosecutors gave Siggi immunity for testimony in 2019, he exploited that immunity to commit new crimes in Iceland. The suggestion starts by claiming that the outdated NYT Problem remained true in 2017 and parroting the WikiLeaks claim that therefore what must have changed was the appointment of Bill Barr (who was confirmed after the initial complaint and first indictment had already been obtained).

Although the Department of Justice had spent extreme resources attempting to build a case against Julian Assange during the Obama presidency, they had decided against indicting Assange. The main concern was what was called “The New York Times Problem”, namely that there was such a difficulty in distinguishing between WikiLeaks publications and NYT publications of the same material that going after one party would pose grave First Amendment concerns.

President Donald Trump’s appointed Attorney general William Barr did not share these concerns, and neither did his Trump-appointed deputy Kellen S. Dwyer. Barr, who faced severe criticism for politicizing the DoJ on behalf of the president, got the ball rolling on the Assange case once again. Their argument was that if they could prove he was a criminal rather than a journalist the charges would stick, and that was where Thordarson’s testimony would be key.

I don’t fault journalists in Iceland from repeating this bit of propaganda. After all, even Pulitzer prize winning NYT journalists do. But the NYT problem was overcome when WikiLeaks did something in 2013 — help Edward Snowden get asylum in Russia — that the journalists involved at the time said was not journalism. What’s novel about this take, however, is the claim that career prosecutor Kellen Dwyer was “Trump-appointed.” Dwyer has been an EDVA prosecutor through four Administrations, since the George W Bush administration.

I assume that the reason why it’s important for this tale to claim that Dwyer was appointed by Barr is to claim the immunity agreement under which Siggi — and several other known witnesses to this prosecution — testified did something it didn’t.

In May 2019 Thordarson was offered an immunity deal, signed by Dwyer, that granted him immunity from prosecution based on any information on wrong doing they had on him. The deal, seen in writing by Stundin, also guarantees that the DoJ would not share any such information to other prosecutorial or law enforcement agencies. That would include Icelandic ones, meaning that the Americans will not share information on crimes he might have committed threatening Icelandic security interests – and the Americans apparently had plenty of those but had over the years failed to share them with their Icelandic counterparts.

All the agreement does is immunize the witness against prosecution for the crimes they admit during interviews with prosecutors they were part of, so as to avoid any Fifth Amendment problem with self-incrimination. This is not about hiding Siggi’s role in WikiLeaks; it has been public for a decade. Moreover the article even described the US sharing just the kind of security threat information this paragraph claims they did not.

Jónasson recalls that when the FBI first contacted Icelandic authorities on June 20th 2011 it was to warn Iceland of an imminent and grave threat of intrusion against government computers. A few days later FBI agents flew to Iceland and offered formally to assist in thwarting this grave danger. The offer was accepted and on July 4th a formal rogatory letter was sent to Iceland to seal the mutual assistance.

All that immunity did was provide DOJ a way to ask Siggi about his role at the time. It didn’t immunize future crime in Iceland, nor did it give him any incentive to claim Assange asked him to hack things he hadn’t.

That’s the extent to which these journalists are spinning wildly: getting the facts about the prosecutors and the law wrong in a piece claiming to assess how Siggi recanting what they assume he told prosecutors in 2019 would affect the indictment.

Siggi’s purportedly retracted claims in several cases don’t conflict with the indictment

And, even beyond claiming Siggi is the “main witness” against Assange, they seem to misunderstand the indictment, in which Siggi’s actions play a role in a limited set of overt acts in a Computer Fraud and Abuse Act charge. Because there are so many ways that Assange allegedly engaged in a long-ranging effort to encourage hackers, jurors could find Assange guilty even if none of the Siggi events were deemed credible, and he is central (though his testimony may not be) to just a portion of the overt acts in the CFAA charge.

In fact, this piece never once cites the indictment directly.

Instead, they cite Judge Vanessa Baraitser’s ruling on Assange’s extradition. They cite fragments though, not the single paragraph about Siggi’s role in the CFAA charge that is relevant (indeed, was key) to her decision:

100. At the same time as these communications, it is alleged, he was encouraging others to hack into computers to obtain information. This activity does not form part of the “Manning” allegations but it took place at exactly the same time and supports the case that Mr. Assange was engaged in a wider scheme, to work with computer hackers and whistle blowers to obtain information for Wikileaks. Ms. Manning was aware of his work with these hacking groups as Mr. Assange messaged her several times about it. For example, it is alleged that, on 5 March 2010 Mr. Assange told Ms. Manning that he had received stolen banking documents from a source (Teenager); on 10 March 2010, Mr. Assange told Ms. Manning that he had given an “intel source” a “list of things we wanted” and the source had provided four months of recordings of all phones in the Parliament of the government of NATO country-1; and, on 17 March 2010, Mr. Assange told Ms. Manning that he used the unauthorised access given to him by a source, to access a government website of NATO country-1 used to track police vehicles. His agreement with Ms. Manning, to decipher the alphanumeric code she gave him, took place on 8 March 2010, in the midst of his efforts to obtain, and to recruit others to obtain, information through computer hacking. [italics and bold mine]

Baraitser includes the overt acts involving Siggi — that Siggi gave Assange “stolen banking documents,” may have been his source for “a list of things he wanted” including recordings from Parliament, and provided Assange access to an Icelandic police website — not for Siggi’s role in the action, but for Assange’s representations to Chelsea Manning about them. “Mr. Assange told Ms. Manning … Mr. Assange told Ms. Manning … Mr. Assange told Ms. Manning” certain things about Siggi, and what mattered most is that Assange made the claims, not whether what Assange claimed to Manning was true or not, because it was part of getting her to leak more documents.

The two times Stundin does cite Baraitser’s judgment, they cite it misleadingly, particularly with regards any claims made about the indictment. The sole citation to the critical paragraph of Baraitser’s ruling I cited above appears this way:

More deceptive language emerges in the aforementioned judgment where it states: “…he [Assange] used the unauthorized access given to him by a source, to access a government website of NATO country-1 used to track police vehicles.”

This depiction leaves out an important element, one that Thordarson clarifies in his interview with Stundin. The login information was in fact his own and not obtained through any nefarious means. In fact, he now admits he had been given this access as a matter of routine due to his work as a first responder while volunteering for a search and rescue team. He also says Assange never asked for any such access.

As noted above in bold, in the critical paragraph pertaining to Siggi of the ruling, this topic matters solely for how it related to Assange’s interactions with Manning. And where she introduces the allegation earlier in her ruling, Baraitser makes no claim that Siggi’s access was unauthorized, only that Assange’s was.

It is alleged that Mr. Assange kept Ms. Manning informed about these hacking activities: on 5 March 2010, he told her that he had received stolen bank documents from a source (Teenager); on 10 March 2010, he told her that, in response to a “list of things we wanted”, a source had provided him with four months of recordings from phones located within the Parliament of a “NATO country 1”; on 17 March 2010, he told her that he had used the access, given to him by a source, to obtain unauthorised access a government website used to track police vehicles, in “NATO country 1”. [italics and bold mine]

No one is claiming that Siggi obtained the access via nefarious means. Rather, Baraitser claims only that Assange’s — who was not an Icelandic first responder — was unauthorized, to which Siggi’s purported retraction is irrelevant.

And the indictment provides further context — context that addresses another of Stundin’s claims.

41. In early 2010, a source provided ASSANGE with credentials to gain unauthorized access into a website that was used by the government of NATO Country-1 to track the location of police and first responder vehicles, and agreed that ASSANGE should use those credentials to gain unauthorized access to the website.

42. On March 17, 2010, ASSANGE told MANNING that ASSANGE used the unauthorized access to the website of the government of NATO Country-1 for tracking police vehicles (provided to ASSANGE by a source) to determine that NATO Country-1 police were monitoring ASSANGE.

43. On March 29, 2010, WikiLeaks posted to its website classified State Department materials regarding officials in the government of NATO Country-1, which Manning had downloaded on February 14, 2010.

Again, what is key here is that the credentials were unauthorized for Assange (which they were), that Assange went on to tell Manning about it, and that those things happened when Manning was leaking documents pertaining to Iceland as well. Nothing in Siggi’s supposed recantation is even relevant to that.

Similarly, Stundin complains that Baraitser referred to a file from an Icelandic bank as “stolen,” when Siggi says that he understood the file to have been leaked by whistleblowers, not stolen.

One is a reference to Icelandic bank documents. The Magistrate court judgement reads: “It is alleged that Mr. Assange and Teenager failed a joint attempt to decrypt a file stolen from a “NATO country 1” bank”.

Thordarson admits to Stundin that this actually refers to a well publicised event in which an encrypted file was leaked from an Icelandic bank and assumed to contain information about defaulted loans provided by the Icelandic Landsbanki. The bank went under in the fall of 2008, along with almost all other financial institutions in Iceland, and plunged the country into a severe economic crisis. The file was at this time, in summer of 2010, shared by many online who attempted to decrypt it for the public interest purpose of revealing what precipitated the financial crisis. Nothing supports the claim that this file was even “stolen” per se, as it was assumed to have been distributed by whistleblowers from inside the failed bank.

As noted above, in the key paragraph in Baraitser’s judgment, she described that, “Mr. Assange was engaged in a wider scheme, to work with computer hackers and whistle blowers to obtain information for Wikileaks.” The inclusion of whistleblowers here makes it clear that she understood some of this to be leaked rather than hacked.

Moreover, in the indictment, the claim is about how Siggi’s actions tie to requests Assange made of Manning and (presumably) David House (both of whom were also given immunity to testify, though Manning refused to do so), both of whom took steps to access Icelandic files.

35. In early 2010, around the same time that ASSANGE was working with Manning to obtain classified information, ASSANGE met a 17-year old in NATO Country-1 (“Teenager”), who provided ASSANGE with data stolen from a bank.

[snip]

39. On March 5, 2010, ASSANGE told MANNING about having received stolen banking documents from a source who, in fact, was Teenager.

[snip]

44. On July 21, 2010, after ASSANGE and Teenager failed in their joint attempt to decrypt a file stolen from a NATO Country-1 bank, Teenager asked a U.S. person to try to do so. In 2011 and 2012, that individual, who had been an acquaintance of Manning since early 2010, became a paid employee of WikiLeaks, and reported to ASSANGE and Teenager.

The indictment doesn’t source the claim that the file was stolen to Siggi (certainly, the FBI has other ways of finding out what happens to financial files, and in many contexts, a whistleblower leaking them would amount to theft). Nor does it say Siggi stole it. Nor does Siggi’s understanding of whether it was leaked or stolen matter to the conspiracy indictment at hand, not least given its import to Assange and Manning’s alleged attempts to hack a password so she could leak documents, just what Siggi claims he believed bank employees had done. What matters, instead, is the joint shared goal of accessing it. Nothing Siggi says in his supposed recantation of this story undermines that claim.

Stundin’s third specific denial — that Siggi didn’t himself hack the phone recordings of MPs, but instead received them from a third party — is the single denial of a specific claim made in the indictment.

Thordarson now admits to Stundin that Assange never asked him to hack or access phone recordings of MPs. His new claim is that he had in fact received some files from a third party who claimed to have recorded MPs and had offered to share them with Assange without having any idea what they actually contained. He claims he never checked the contents of the files or even if they contained audio recordings as his third party source suggested. He further admits the claim, that Assange had instructed or asked him to access computers in order to find any such recordings, is false.

The indictment does claim that Siggi obtained these files after Assange requested that Siggi hack things.

In early 2010, ASSANGE asked Teenager to commit computer intrusions and steal additional information, including audio recordings of phone conversations between high-ranking officials of the government of NATO Country-1, including members of the Parliament of NATO Country-1.

[snip]

On March 10, 2010, after ASSANGE told Manning that ASSANGE had given an “intel source” a “list of things we wanted” and the source had agreed to provide and did provide four months of recordings of all phones in the Parliament of the government of a NATO Country-1, ASSANGE stated, “So that’s what I think the future is like ;),” referring to how he expected WikiLeaks to operate.

Siggi denies he hacked anything to get these files, but he does say he got them. He got them, instead, from a third party, unasked. Even if that’s true (and even if the third party wasn’t the intel source), the key point here is that Assange enticed Manning to keep providing requested documents by claiming he had successfully requested and obtained the recorded calls.

The specific denials in this story, even if true, don’t actually deny anything of substance and in one case is completely consistent with the indictment. More importantly, none of these denials are relevant to the way in which Baraitser used them, which is to discuss how Assange’s interactions with Siggi, Manning, and House were part of a unified effort; that unified effort is the only reason Iceland (but not Siggi alone) is key.

The story is silent about or confirms the more serious allegations about Siggi

And the parts of the indictment where Siggi’s role is key, which pertain to Assange’s alleged entry into a conspiracy with Lulzsec to hack Stratfor and to hack a Wikileaks dissident, are unaddressed in this story. For example, Stundin describes reading chat logs Siggi provided — which is not the full set of chatlogs available to the US government, though Stundin claims they must be comprehensive — and finding no proof in the chatlogs that anyone at Wikieaks ordered him to ask other hackers to hack websites. But their focus is on why Siggi asked other hackers to hack Icelandic sites. There’s no mention of hacking US sites.

The chat logs were gathered by Thordarson himself and give a comprehensive picture of his communications whilst he was volunteering for Wikileaks in 2010 and 11. It entails his talks with WikiLeaks staff as well as unauthorized communications with members of international hacking groups that he got into contact with via his role as a moderator on an open IRC WikiLeaks forum, which is a form of live online chat. There is no indication WikiLeaks staff had any knowledge of Thordarson’s contacts with aforementioned hacking groups, indeed the logs show his clear deception.

The communications there show a pattern where Thordarson is constantly inflating his position within WikiLeaks, describing himself as chief of staff, head of communications, No 2 in the organization or responsible for recruits. In these communications Thordarson frequently asks the hackers to either access material from Icelandic entities or attack Icelandic websites with so-called DDoS attacks. These are designed to disable sites and make them inaccessible but not cause permanent damage to content.

Stundin cannot find any evidence that Thordarson was ever instructed to make those requests by anyone inside WikiLeaks. Thordarson himself is not even claiming that, although he explains this as something Assange was aware of or that he had interpreted it so that this was expected of him. How this supposed non-verbal communication took place he cannot explain. [my emphasis]

More bizarre still, Stundin describes Siggi admitting that “Assange was aware of or that he had interpreted it so that this was expected of him.” This actually confirms the most important key allegation pertaining to Lulzsec, that when Siggi was negotiating all this, he claimed to DOJ and still claims now, Assange knew and approved of it. And in fact the indictment alleges that Siggi proved to Topiary he was working with Assange by filming himself sitting with Assange, a non-verbal communication that — because Siggi deleted it — would not have been included in the chatlogs that Stundin insists had to be comprehensive.

To show Topiary that Teenager spoke for WikiLeaks so that an agreement could be reached between WikiLeaks and LulzSec, Teenager posted to YouTube (and then quickly deleted) a video of his computer screen that showed the conversation that he was then having with Topiary. The video turned from Topiary’s computer screen and showed ASSANGE sitting nearby.

In fact, the only specific denial regarding LulzSec in this piece pertains to Sabu, not any of the people that Siggi is alleged to have spoken with.

Thordarson continued to step up his illicit activities in the summer of 2011 when he established communication with “Sabu”, the online moniker of Hector Xavier Monsegur, a hacker and a member of the rather infamous LulzSec hacker group. In that effort all indications are that Thordarson was acting alone without any authorization, let alone urging, from anyone inside WikiLeaks.

There’s no allegation in the indictment pertaining to Siggi’s conversations with Sabu. It alleges he was part of the conspiracy, but not that he spoke with Siggi.

Finally, the one other key allegation involving Siggi in the indictment — that Assange asked him to hack a WikiLeaks dissident — is actually sourced independently to an Assange comment. Nothing in this article denies it specifically, but it’s not even necessarily sourced to Siggi.

There’s no there there in this article. Moreover, all the claims in it — most notably, that Siggi is a sociopath and a liar — have been long known. What the article misunderstands is where Siggi’s testimony may be important, where it served to explain existing documentary files, and the many ways in which DOJ ensured it didn’t rely on such an easily discredited witness. The article also doesn’t understand how co-conspirator statements — statements that have already been made — get entered at trial.

You go to trial with the sociopaths that a target like Julian Assange has chosen to associate with, not with the Boy Scouts you’d like to have as witnesses. But this indictment relies on that sociopath far less than Stundin would have you believe, and Siggi’s purported retractions do very little to rebut the indictment or Baraitser’s ruling about the case. More importantly, the article claims that the DOJ’s purported reliance on a sociopath is fatal, but their argument is based on the claims of that same sociopath.

WikiLeaks boosters claim it exonerates Julian Assange that someone they claim is a liar claims he lied

Admittedly, this is what WikiLeaks always does with their shoddy propaganda claims. They did it with their misrepresentations about a pardon dangle delivered by suspected Russian asset Dana Rohrabacher, they did it with the admission that former Sputnik employee Cassandra Fairbanks personally ferried non-public information about Assange’s prosecution from Don Jr’s best friend to Assange, and they did it with unsupported allegations about UC Global.

They don’t care what the actual evidence is or supports, so long as they have a shiny object that their army of boosters can point to to claim the indictment says something other than it does.

But this one is particularly remarkable because of shit like this.

Edward Snowden, who explained his theft of vast swaths of secret documents based on a claim that he had the judgment to know what he was seeing was abuse, claims to believe that this article “is the end of the case against Julian Assange.” That is, Ed Snowden has displayed for all the world that his critical reasoning skills are so poor that he doesn’t understand that — even if every single thing Siggi is reported to say in this article were true (including his claim that Assange knew and approved of his efforts to forge ties with LulzSec) — it would do little damage to the indictment against Julian Assange.

It amounts to Ed Snowden putting up a sign saying, “Oh sure, I knew better than the entire NSA, but I have such poor critical thinking skills I can’t read through a misleading headline.”

Worse still, what Ed Snowden is telling you to do is to trust the word of someone that — everyone agrees! — is a lying sociopath!! Ed and the entire WikiLeaks booster community here are endorsing the truth claims of someone they acknowledge in the same breath is a liar and a sociopath. What matters for them is not any critical assessment of whether Siggi could be telling the truth, but that the liar is saying what will help them.

Finally, the craziest thing is that Edward Snowden, who not only is personally named in five of the fifty CFAA overt acts, but whose own book confirms key allegations in those five overt acts, pretends that someone else is the star witness. Snowden’s own book, itself, could result in a guilty verdict on the CFAA claim, and the only way to prevent his book from serving that role is for Ed Snowden to claim he himself is a liar. This indictment could only be “poisoned top-to-bottom with false testimony” if Snowden came out tomorrow and claimed he was lying in his own book.

Ed Snowden’s own claim to be telling the truth distinguishes him as a whistleblower rather than a spy. But here, he affirmatively asks you to believe someone everyone agrees is a liar. And based on the belief that that liar was this time telling the truth, Ed asserts that an indictment that implicates his own truth claims is “poisoned top-to-bottom with false testimony.”

Update: One more thing I didn’t stress enough. This story doesn’t claim that prosecutors lied to the UK. Rather, they claim (without evidence about the full set of witnesses and evidence that DOJ relied on), that Siggi misled DOJ about two claims that don’t affect most of the CFAA charge.

Update: I’ve added language making it clear that the claim that Assange knew Siggi was negotiating ties with Lulzsec is still apparently based on what Siggi told DOJ and what he maintains now. That overt act is not the only one showing Assange entering into an agreement before they hacked Stratfor though.

Update: Subtropolis has convinced me to drop the references to Siggi as a child rapist, as he was underage too at the time.

Update: Corrected that the W administration was four Administrations ago.


How Don McGahn Distracted the NYTimes from the Subpoenas Known To Be Problematic

The NYT just published a story that buried incredibly important details about the HPSCI subpoena in paragraphs 18 and 19.

In that case, the leak investigation appeared to have been primarily focused on Michael Bahar, then a staffer on the House Intelligence Committee. People close to Jeff Sessions and Rod J. Rosenstein, the top two Justice Department officials at the time, have said that neither knew that prosecutors had sought data about the accounts of lawmakers for that investigation.

It remains murky whether agents were pursuing a theory that Mr. Bahar had leaked on his own or whether they suspected him of talking to reporters with the approval of the lawmakers. Either way, it appears they were unable to prove their suspicions that he was the source of any unauthorized disclosures; the case has been closed and no charges were brought.

The details back a hypothesis that I and others have raised about the 2018 subpoena that obtained Adam Schiff’s call records: that Schiff wasn’t targeted at all, but instead someone else — here, Michael Bahar — was the target.

That means that the initial subpoena may have been more stupid — not adequately targeted given the scope of the investigation — than scandalous. It also means that the focus should remain on Bill Barr’s renewed focus on those records in 2020, particularly whether or not he used Schiff records that should have been sealed to investigate a key member of Congress.

But that’s not how the NYT is spending its time. Instead, they are spending 17 paragraphs admitting that they have no idea whether a subpoena obtained by an EDVA grand jury for Don McGahn’s records on February 23, 2018 is newsworthy or not.

They report that Apple got the subpoena for McGahn, implying but not reporting clearly that all Apple provided was subscriber information.

Apple told Donald F. McGahn II, the White House counsel to former President Donald J. Trump, last month that the Justice Department had subpoenaed information about an account that belonged to him in February 2018, and that the government barred the company from telling him at the time, according to two people briefed on the matter.

Mr. McGahn’s wife received a similar notice from Apple, said one of the people, who spoke on the condition of anonymity to discuss a sensitive matter.

It is not clear what F.B.I. agents were scrutinizing, nor whether Mr. McGahn was their specific focus. In investigations, agents sometimes compile a large list of phone numbers and email addresses that were in contact with a subject, and seek to identify all those people by using subpoenas to communications companies for any account information like names, computer addresses and credit card numbers associated with them.

They assume, with no evidence, that the subpoena was obtained because McGahn was Trump’s White House counsel.

Still, the disclosure that agents secretly collected data of a sitting White House counsel is striking as it comes amid a political backlash to revelations about Trump-era seizures of data of reporters and Democrats in Congress for leak investigations. The president’s top lawyer is also a chief point of contact between the White House and the Justice Department.

They then go tick off one after another possible explanation:

  • The Manafort tax investigation, which was conducted in DC, and was completed in, and therefore would have been disclosed in, 2018
  • A tirade Trump launched about McGahn involving a potential leak that would have been investigated in DC
  • The totally unrelated HPSCI subpoena, which also was investigated in DC

They don’t consider a much more likely explanation, especially since Mueller is known to have identified at least three SuperPACs that were coordinating with the Trump campaign, including at least two that were headquartered in VA, but did not pursue charges relating to potential illegal coordination himself. That possibility is that prosecutors were appropriately investigating why the former FEC chairman was letting Trump’s 2016 campaign coordinate with so many supposedly independent PACs, particularly given his knowledge that Trump and Michael Cohen had been investigated for campaign finance laws in 2011, before then FEC Chair Don McGahn bailed them out for it. There’s no evidence Mueller’s investigators asked McGahn about this, even though Roger Stone’s coordination with Steve Bannon and Rick Gates was a subject of considerable interest to Mueller (in part because it implicated the Mercers).

That’s just one possible explanation, but unlike all the speculation included in the NYT story not focusing on Barr’s resuscitation of the HPSCI leak, might actually involve a grand jury in VA.

Until there’s some sense of what this subpoena was, there’s zero reason to assume it’s newsworthy or in any way focused on something McGahn had done as White House Counsel.

One of the only pieces of genuine “news” that came out of McGahn’s testimony the other day is he confessed to being a source for a story that was obviously sourced to someone close to him that nevertheless claimed he, personally, had not responded to requests for comment. “McGahn did not respond to requests for comment.” The man knows how to make journalists run around like puppies chasing his shiny objects.

And what the NYT just did was take their focus away from subpoenas there’s good reason to believe are newsworthy to instead speculate wildly about one that may not be.

Copyright © 2024 emptywheel. All rights reserved.
Originally Posted @ https://www.emptywheel.net/leak-investigations/page/27/