Posts

“Poor Mr. Zebley:” Both Xitter’s Lawyers and Journalists Responding to Boilerplate Need to re-Read Mueller

/53 Comments/in , /by

I’ve stopped trying to convince Russian denialists on Xitter that they’re willfully ignorant of facts. At this point, denialists are just trolls exploiting Xitter’s algorithm to create scandal.

I try to focus my time, instead, on conspiracy theorists platformed by prominent schools of journalism.

But when others try to correct denialists on Xitter, they almost always say the denialists haven’t read the Mueller Report closely enough.

So I found it wildly ironic that Chief Judge Beryl Howell, during a period in February when Elon Musk was letting denialists like Matty Dick Pics Taibbi invade the privacy of then-Twitter’s users so he could spew conspiracy theories, Howell scolded Twitter’s lawyer George Varghese that he hadn’t read the Mueller Report closely enough.

THE COURT: You need to read the Mueller report a little bit more carefully.

The transcript of the court hearing and much of the rest of the back-up to Xitter’s attempt to stall compliance of the warrant was unsealed yesterday.

Mind you, Howell was trying to convey to Twitter’s team that there is precedent for investigating Donald J. Trump without giving him advance warning of every investigative step.

MR. VARGHESE: Yes, Your Honor. Our —- by

THE COURT: You think that for 230 orders, 2800 subpoenas, and 500 search and seizure warrants the Mueller team gave advance notice to the former President of what they were about?

MR. VARGHESE: I don’t know that, Your Honor.

THE COURT: You do not know that.

The hearing made it pretty clear that Howell is convinced that Trump will stop at nothing to obstruct criminal investigations into himself.

Howell, who knows what went into the Mueller Report as well as anyone outside the investigative team, does know that.

In fact, when she told Varghese he should have read the Mueller Report more closely, she had just pointed to private comms described in the Mueller Report — the ones where Trump told Mike Flynn to stay strong — where Trump had not gotten advance notice, as prosecutors were demanding he not get advance notice about a warrant to Twitter.

THE COURT: Because the Mueller report talks about the hundreds of Stored Communications Act — let me quote.

Let’s see.

The Mueller report states that: As part of its investigation, they issued more than 2800 subpoenas under the auspices of the grand jury in the District of Columbia.

They executed nearly 500 search and seizure warrants, obtained more than 230 orders for communications records under 18 U.S.C. Section 2703(d); and then it goes on and on and on for all of the other things they did.

And some of those communications included the former President’s private and public messages to General Flynn, encouraging him to “Stay strong,” and conveying that the President still cared about him, before he began to cooperate with the government.

So what makes Twitter think that, before the government obtained and reviewed those Trump-Flynn communications, the government provided prior notice to the former President so that he can assert executive privilege?

MR. VARGHESE: My understanding, Your Honor, is that the Mueller investigators were in contact with the White House counsel’s office about executive privilege concerns.

THE COURT: You quoted the one part that said that, and that was for testimony, testimony, where it was not covert.

Side note: Xitter’s lawyers may not have been entirely wrong about consultations with the White House counsel, even for materials obtained covertly.

This exchange happened on February 7. Two days later there was a follow-up hearing, and WilmerHale counsel Aaron Zebley — someone who knows better than Beryl Howell what happened to the materials for which Howell approved legal process after it got handed over but before they ended up in the Report itself — filed an appearance in this challenge. He never spoke though; he showed up late, if at all, and at one point, after Twitter had presented their opening argument, Howell asked someone to check whether “poor Mr. Zebley” was standing outside a locked door waiting to get in.

THE COURT: Okay. Well, let me just —

Mr. Windom, do you want to think about that or do you want to respond?

Do you think Mr. Zebley is standing outside the locked door?

MR. HOLTZBLATT: I think there is a chance.

THE COURT: Could you check? Poor Mr. Zebley.

MR. WINDOM: Should I wait, Your Honor, or proceed?

THE COURT: Proceed. In my chambers we wait for no man.

Twitter was trying to make an argument that someone had to attend to potential Executive Privilege claims. Howell and the prosecutors nodded several times to a filter protocol addressing privilege issues, of which Twitter was ignorant. And yet Twitter was refusing to comply unless they had the opportunity to tell Donald Trump about the warrant in advance.

Beryl Howell, who was years into her second investigation of Donald Trump at this point, might be forgiven for impatience with lawyers who don’t understand how many Executive Privilege disputes she had presided over between those two investigations. They might be forgiven for their ignorance of all the resolutions of Trump’s current challenges to Executive Privilege in the January 6 investigation.

That said, Twitter’s lawyers aren’t the only ones who should have read the Mueller Report more closely. So are the journalists reporting on this.

One after another journalist (CNN, NYT, Politico, all involving journalists who covered the Mueller investigation) has mistaken DOJ’s request for data — attachment B to the warrant — as some kind of statement of what DOJ was most interested in receiving. Based on that, their stories focus on the fact that DOJ asked for or obtained DMs involving the former President.

But that attachment looks to be largely boilerplate. It is not much different from warrants obtained five years ago, in the Mueller investigation, such as this one, also served on Twitter, apparently targeting Trump’s rat-fucker Roger Stone in an investigation into whether he was serving as a foreign agent of Russia, a warrant that also came with a gag, one Twitter did not contest. One main — telling — difference, is that the Trump request included standard subscription information, which Mueller’s investigators appear to have already requested; one of the items on which Twitter held up compliance, in fact, was Trump’s gender, a sure testament to obstruction within the company.

While Twitter’s services have changed significantly in the interim years, both ask for the same kind of information: DMs, drafts, deleted content, favorited content.

And for good reason!!! These warrants may well have been targeting the same kind of behavior, the kind of organized troll campaigns that exploit Twitter’s algorithms, in which users use a variety of means to obscure their identity. There is a significant likelihood these warrants were targeting precisely the same group of far right online activity, the very same people.

One of the most important Twitter users leading up to January 6, Ali Alexander, is the protégé of Roger Stone and the effort to drive attendance at January 6, Stop the Steal, was a continuation of the effort Stone started in 2016, an effort that may well have been covered by that 2018 warrant or one of the others targeting Stone’s Twitter activity.

To be sure: There are DMs in Trump’s account, though it’s not entirely clear when they date to. Without reading any of the DMs, Twitter checked to see whether the volume of data in Trump’s account indicated the presence of DMs.

MR. VARGHESE: So, Your Honor, we went back — because this was an important issue for us to compare, whether or not there were potentially confidential communications in the account, and we were able to confirm that.

THE COURT: How?

MR. VARGHESE: So, Your Honor, there was a way that we compared the size of what a storage would be for DMs empty versus the size of storage if there were DMs in the account. And we were able to determine that there was some volume in that for this account. So there are confidential communications. We don’t know the context of it, we don’t know —

THE COURT: They are direct messages. What makes you think — do you think that everything that a President  says, which is generically a presidential communication, is subject to the presidential communications privilege?

MR. VARGHESE: No, Your Honor.

But Twitter’s focus on DMs arose from their frivolous basis for delaying response to the warrant — their claim that some of these DMs might be subject to a claim of Executive Privilege.

Moreover, having DMs in the account is not the same thing as a prosecutor confirming that they ultimately obtained DMs, or that any DMs were relevant to the investigation, or that DMs were one of the things they were most interested in.

I don’t doubt that’s likely! But what prosecutors asked for and what was in the larger account is not the same thing as what DOJ ultimately received and used.

And the DMs — most of them, anyway — are something that were available elsewhere. At least as represented in the dispute, NARA already has Trump’s DMs from the period (DOJ chose not to go to NARA, in part, because they wanted to avoid notice that NARA has provided to Trump along the way).

There were three more things that DOJ showed perhaps more interest in, requiring Twitter to go beyond their normal warrant response tools to comply.

The first has to do with emails to Twitter about the account, of which prosecutor Thomas Windom was most interested in emails from people on behalf of Trump.

But this information about, you know, what it is that we say that we’re most specifically interested in, I did not represent that we were most interested in communications betueen government officials and Twitter regarding the account.

We did point out that — much as Your Honor did just now — it seemed beyond comprehension that there weren’t communications regarding the account when it was suspended and terminated, but that doesn’t mean government officials at least cabined to that. It can mean campaign officials. It can be anybody acting on behalf of the user of the account, or the user of the account himself.

THE COURT: So any person regarding the account is broader than what you just said, though, Mr. Windom.

“Any person regarding the account” is quite broad. It could be all the complaints of all of the Trump supporters out in the world saying: What are you doing, Twitter?

So I take it, from what you just said, that you are interested only in =- rather than “any person,” a person who was the subscriber or user of the account or on behalf of that person regarding the account?

MR. WINDOM: Yes, ma’am. An agent thereof.

When Twitter cut Trump off in 2021, they cut off active plans for follow-up attacks. And these emails might indicate awareness of how Trump was using Twitter as a tool to foment insurrection.

Another item on which Windom focused in the following hearing was associated accounts — other accounts the identifiers used with Trump’s accounts also use. Twitter claims they don’t have that — at least not in their law enforcement portal — and so had to collect it manually. But DOJ did ask them to produce it. (Note, the fact that Xitter doesn’t store this is one reason why they’re so bad at tracking information operation campaigns, because visibility on these kind of associations are how you discover them.)

MR. HOLTZBLATT: Well, Your Honor, we don’t — the issue, Your Honor — there isn’t a category of “associated account information”; that’s not information that Twitter stores.

What we are doing right now is manually attempting to ascertain links between accounts. But the ascertainment of links between accounts on the basis of machine, cookie, IP address, email address, or other account or device identifier is not information that Twitter possesses, it would be information that Twitter needs to create. So that’s the reason why we had not previously produced it because it’s not a category of information that we actually possess.

[snip]

MR. WINDOM: It is, as explained more fully in the warrant — but for these purposes, it is a useful tool in identifying what other accounts are being used by the same user or by the same device that has access to the account is oftentimes in any number of cases, user attribution is important. And if there are other accounts that a user is using, that is very important to the government’s investigation.

[snip]

MR. HOLTZBLATT: That’s right. If the records — if the linkage between accounts, which is what we understand this category to be referring to, is not itself a piece of information that we keep, then it’s not a business record that we would ordinarily produce.

What I understand the government to be asking is for us to analyze our data, as opposed to produce existing data. And we are trying to work with the government in that respect, but that is the reason that it is not something that — that is a different category of information.

As Windom explained, this information is critical to any attribution, but it’s also important to learning the network of people who would Tweet on Trump’s behalf, and any overlap between his account and their own (as Roger Stone’s showed in 2016).

Then there’s something that remains only partially explained. For some reason — even Twitter could not figure out why — there were two preservations of Trump’s account in January 2021, before the preservation associated with this warrant. One was on January 9. The other covered January 11 and 12. And when asked, the government of course wanted the latter preservation too — and it is in the possession of Twitter, and so covered by the warrant.

MR. HOLTZBLATT: At 5 p.m. on February 7th, I think that was our day, we produced all data in this category that was in the standard production tools of Twitter.

We communicated with the government on February 8th that there were prior preservations of the subject account that are not within Twitter’s standard production tools and that would, therefore, require engineering to obtain information. And we asked the government whether it wished us to undertake that effort, and the government confirmed that it did.

And we have since then — when we produced on February 7, we indicated to the government in our production letter that there was potentially deleted data that might exist, which is what would be found in prior preservations, but that it would require additional engineering efforts.

At 2 a.m. last night, or this morning, Twitter produced additional information from those prior preservations that falls within category 2A. There are —

THE COURT: When you say “prior preservations” what are you talking about?

Prior litigation holds of some kind or that you  had a stash or a cache of preserved data sitting in different places? What are you talking about?

MR. HOLTZBLATT: I am referring — with respect to this particular account, I am referring to preservations from two specific dates. There is a preservation that was made that includes the subject account covering January 3rd to 9th, 2021. There is a second preservation of this that includes this account that covers January 11 to 12, 2021.

Those are collections of data that — they are not — it’s not coterminous with the categories that would exist in the active account right now and — and that’s data that does not exist within a production environment. So it’s not data that you can just click — we have a system to just click a button and produce, which is why we indicated that further engineering efforts might be necessary.

We asked the government if they wished us to undertake those efforts. We had an engineer working through the night, after the government asked us to, to undertake those efforts. At 2 a.m. in the morning we produced additional information that came from those preservation.

There are two categories of information that — actually, I’m sorry, three categories of information that we are still working to produce because of the engineering challenges associated.

One of those categories is the list of — I am not sure this is from 2A. But I think, for purposes of coherence, it would be helpful for me to describe it now because it connects to this preservation; that is,  followers — a list of followers for this account that were contained within the January 11 through 12th prior preservation. We have segregated that information. It is a complicated and large set of information. And we are unable to deliver it in the manner that we normally deliver information to law enforcement, which is to send a token.

We believe right now it would require physical media to put that information on and to hand it over to the government.

[snip]

MR. HOLTZBLATT: As I mentioned, Your Honor, there were two prior preservations, and then there is the current production tools. In two of the three of those sets, the January 3 through 9 and the current one, we have produced the tweets and related tweet information for the account.

In the January 11 to 12th prior preservation, the way that the tweet and tweet-related information is stored, it goes all the way back to 2006. We don’t have a warrant — that is contents of user communications. He don’t nave a warrant that would permit us to produce the entirety of that information. So what we have is a tool 7 that — what we refer to as a redaction (sic) tool or trimming tool. Because this is not a production environment, a human being has to go in and manually trim the information to isolate the date range. That, I think Your Honor can understand, is a laborious process, including for this particular account, given the time frame; and we need to isolate it, I think, over a three-month, four-month period, I’m sorry, Your Honor. So we are undertaking it.

Unsurprisingly, DOJ wanted to be able to compare the accounts as they existed on January 8 and January 12, 2021, because Trump’s attack was still ongoing and because people were beginning to delete data.

Trump’s DMs, if he used them or even just received them in this period, would be critically important. But Twitter was one of Trump’s most important tools in sowing an insurrection. And the data showing how he used the account, and who also used it, is as important to understanding how the tool worked as the non-public content.

Jeff Sessions HAD Shut Down the Investigation into Russian Interference

/57 Comments/in , /by

The most alarming exchange in the Mueller Report described how, on June 19, 2017, President Trump dictated a message that Corey Lewandowski should take to Jeff Sessions, telling Sessions (in part) to meet with Mueller and limit his jurisdiction to investigating only “election meddling for future elections,” not the one that got him elected.

During the June 19 meeting, Lewandowski recalled that, after some small talk, the President brought up Sessions and criticized his recusal from the Russia investigation.605 The President told Lewandowski that Sessions was weak and that if the President had known about the likelihood of recusal in advance, he would not have appointed Sessions.606 The President then asked Lewandowski to deliver a message to Sessions and said “write this down.” 607 This was the first time the President had asked Lewandowski to take dictation, and Lewandowski wrote as fast as possible to make sure he captured the content correctly.608

The President directed that Sessions should give a speech publicly announcing:

I know that I recused myself from certain things having to do with specific areas. But our POTUS . .. is being treated very unfairly. He shouldn’t have a Special Prosecutor/Counsel b/c he hasn’t done anything wrong. I was on the campaign w/ him for nine months, there were no Russians involved with him. I know it for a fact b/c I was there. He didn’t do anything wrong except he ran the greatest campaign in American history.609

The dictated message went on to state that Sessions would meet with the Special Counsel to limit his jurisdiction to future election interference:

Now a group of people want to subvert the Constitution of the United States. I am going to meet with the Special Prosecutor to explain this is very unfair and let the Special Prosecutor move forward with investigating election meddling for future elections so that nothing can happen in future elections.610

The President said that if Sessions delivered that statement he would be the “most popular guy in the country.”611

Lewandowski told the President he understood what the President wanted Sessions to do.6 12 Lewandowski wanted to pass the message to Sessions in person rather than over the phone.613 He did not want to meet at the Department of Justice because he did not want a public log of his visit and did not want Sessions to have an advantage over him by meeting on what Lewandowski described as Sessions’s turf. 614 Lewandowski called Sessions and arranged a meeting for the following evening at Lewandowski’s office, but Sessions had to cancel due to a last minute conflict.6 15 Shortly thereafter, Lewandowski left Washington, D.C., without having had an opportunity to meet with Sessions to convey the President’s message.6 16 Lewandowski stored the notes in a safe at his home, which he stated was his standard procedure with sensitive items.617

When the Mueller Report came out, this seemed distinct from all other attempts to fire Mueller, because it attempted to shut down not just the investigation into Trump, but even the investigation into Russia’s interference in 2016 altogether.

But a passage from Andrew Weissmann’s book makes this passage even more alarming. He describes how, “a few weeks after he arrived” (and so around the same time as Trump’s dictation to Lewandowski), after Jeannie Rhee got her own briefing on the ongoing investigation into Russian interference, Weissmann asked for the same briefing. He discovered that no one was really investigating it.

As soon as the Special Counsel’s Office opened up shop, Team R inherited work produced by other government investigations that had been launched before ours: These included the Papadopoulos lead, the National Security Division’s investigation into Russian hacking, and the Intelligence Community’s written assessment on Russian interference.

Ingesting this information was the domain of Team R, and Jeannie had quickly gotten to work untangling and synthesizing the facts. A few weeks after I arrived, I asked attorneys in the National Security Division of the Department of Justice to give me the same briefing they had given Jeannie, so I could familiarize myself with the investigation they’d been conducting into Russian hacking.

The meeting was in a SCIF at Justice’s imposing art deco headquarters on Pennsylvania Avenue.

[snip]

Because my debriefing with the National Security Division involved classified information, I cannot discuss its content substantively here. It took a couple of hours, as a team of NSD lawyers graciously walked me through what they had been up to and answered all my questions. As soon as I got back to our offices, however, I made a beeline to Jeannie’s office and immediately asked her: “What the fuck?”

“I know,” she said. She didn’t need me to finish my thought.

We had both been shocked by something we’d heard in our briefings—but it was less the substance of the Justice Department’s investigation than its approach. Jeannie knew that she was going to inherit some evidence that Russia had hacked the DNC and DCCC emails, but she was astonished that the National Security Division was not examining what the Russians had done with the emails and other documents they’d stolen from those servers—how the release of that information was weaponized by targeted release, and whether the Russians had any American accomplices. More alarmingly, the Department was not apparently looking beyond the hacking at all, to examine whether there had been other Russian efforts to disrupt the election. It was staggering to us that the Justice Department’s investigation was so narrowly circumscribed. Election interference by a foreign power was, inarguably, a national security issue; we expected the National Security Division to undertake a comprehensive investigation. Once again, Jeannie and I were left to speculate as to whether this lapse was the result of incompetence, political interference, fear of turning up answers that the Department’s political leaders would not like, or all of the above. The Intelligence Community’s investigation had assessed that Russia was behind the hacking, but remained seemingly incurious as to everything else. “The rest is going to be up to us,” Jeannie explained. [my emphasis]

As Weissmann describes, Aaron Zebley narrowly focused the Mueller investigation, at first, to leave out any investigation into how Russia had weaponized the releases against Hillary.

But Mueller’s deputy, Aaron Zebley, argued that it was not actually within our remit to look at Russian interference. This defied all logic; the special counsel’s appointment order, signed by Rod Rosenstein, had made clear that we had the authority to investigate these matters. Indeed, it was the first responsibility the order assigned us: “to ensure a full and thorough investigation of the Russian government’s efforts to interfere in the 2016 presidential election.” But Aaron insisted it was out of bounds and instructed Jeannie to focus Team R’s investigatory energy only on the question of whether there were “links and coordination” between the Russian government and the Trump campaign—the other central duty spelled out in our appointment order.

[snip]

Mueller, meanwhile, signed off on Aaron’s directive for his own set of reasons. Even if Aaron’s logic did not make sense, walling our office off from that larger inquiry into Russian interference spoke to Mueller’s perpetual concern about spreading our resources too thin and his impulse to keep the overall investigation moving quickly. Mueller felt we had too much else to do.

Jeannie was convinced this was wrongheaded: The issue was too important not to undertake ourselves and too central to our remit. She knew that the Department, left to its own devices, was not going to get the job done—with the president publicly expressing antipathy toward substantiating Russian election interference, investigators were not going to get the support for this endeavor—nor would they view digging into this issue as a career enhancer. Mueller and Aaron conceded that if we found Russian links to the campaign, then perhaps Team R could begin to branch out and examine the wider Russian interference effort. Otherwise, Big Bu—the FBI—could handle the interference investigation for now, and simply keep us updated.

Mueller’s thinking had logical force only if you believed the Department would run with the ball—something Jeannie, Omer, and I knew was not going to happen. It was hard to think otherwise: The very reason for appointing a special counsel was because of the conflict the Department of Justice had—it was headed by people selected by the White House and had a conflict in investigating whether the White House coordinated with Russians in the 2016 election. That did not mean there was also a conflict in the Justice Department’s investigating whether and how Russia interfered with the 2016 election, as that investigation should in normal times be a bipartisan effort. One would think any administration would be incentivized to investigate foreign election interference. Except, it turned out, this one. Jeannie knew that if her team did not do it, it was simply not going to happen.

Nevertheless, Aaron told Jeannie to find an appropriate team at the FBI and ship off this part of the investigation. Though Jeannie and her team of attorneys and agents disagreed, they followed orders. She spent the next six weeks, in the late summer and early fall of 2017, trying to interest various squads at the Bureau in taking up the task. No one there wanted to touch it; it was too hot politically, with zero margin for error. Plus, it would be an arduous investigation, requiring a team with both criminal and cyber expertise to roll up its sleeves. (“No cases, no problems,” Omer and I thought.)

In the meantime, she and Lawrence Rush Atkinson, an intrepid young colleague of mine from the Fraud Section who now worked on Team R, and who had cyber expertise, worked late at night, after their other work was done, to keep this part of the investigation moving forward as Jeannie shopped the investigation to people at the Big Bu. She hoped to put herself in a position to reargue Team R’s case to Mueller as more facts emerged.

The book would go on to explain that Facebook’s briefing on the Internet Research Agency trolls gave Rhee the opening to incorporate the Russian interference into the investigation.

As the Mueller Report tells it, Lewandowski never delivered his message to Jeff Sessions.

But as the public record appears, the message got delivered.

“Was Wiped:” A Grammar Lesson for the Frothers

/18 Comments/in , , /by

The frothy right is in a tizzy again.

Judicial Watch got a FOIA response that the frothers are reading out of context — without even reading the existing public record much less asking the question they now claim to want to answer — and claiming that Mueller’s attorneys kept wiping their phones.

The FOIA was for records pertaining to Lisa Page and Peter Strzok’s use of DOJ-issued mobile phones while assigned to Mueller’s team. The FOIA was not for a description of the record-keeping in the Mueller office. The FOIA was not for a final accounting of every text that every Mueller team member sent while working for Mueller. If a document mentions Page or Strzok’s phones, it is included here; if it does not, it was withheld.

That said, the frothy right is largely ignoring what the documents show, and instead referring to a single tracking sheet in isolation from the rest, to conclude that multiple Mueller officials wiped their own phones.

To understand what the documents show, it’s best to separate it into what the documents show about Page and Strzok, and then what they show about everyone else.

Mueller’s Office discovered too late that Page and Strzok’s phones had been reset according to standard procedure

The documents show, first of all, that the available paper trail backs the explanations around what happened to Page and Strzok’s Mueller iPhones, which both used for less than 3 months in 2017 while they also used (and sent damning texts on) their FBI issue Samsung phones.

The documents show that Lisa Page was among the first people assigned a Mueller iPhone. Justice Management Department’s Christopher Greer asked for iPhones specifically to deploy a standard mobile technology (though a later document reflects Adam Jed appears to have gotten an Android). Then, after a 45-day assignment, Page left. As the first person to leave the team, she left before processes were put into place to document all that; Page is actually the one who initiated the bureaucratic process of leaving. “Since we have our first detail employee leaving us, it is time to roll out our first form/policy,” Mueller’s administrative officer explained. Mueller’s Records Officer noted she didn’t have to be at the meeting, but provided an Exit Checklist to use on Page’s out-processing. The Records Officer further directed, weeks before anyone discovered Page’s damning texts with Strzok,

Please make sure [Page] doesn’t delete any text messages off her DOJ iPhone, if any.

Everything else should be saved on her H drive on JCON and in her email. This will be good for me as the RSO to go behind and see how that function works.

Mueller’s Administrative Officer also couldn’t make the meeting. But he noted that Page had a laptop “which may already been in [redacted] area, a DOJ cell phone & charger” and noted that “All equipment that I need will be covered as you go through the form.”

The FOIAed documents don’t reveal this, but a DOJ IG Report released in December 2018 reveal that Page left her devices on a shelf in the office she was using.

The SCO Executive Officer completed Page’s Exit Clearance Certification, but said that she did not physically receive Page’s issued iPhone and laptop. During a phone call, Page indicated to SCO that she had left her assigned cell phone and laptop on a bookshelf at the office on her final day there.

On July 17, two days after she left, that Administrative Officer confirmed that, “I have her phone and laptop.”

That is, everyone involved was trying to do it right, but Page was the first person put through this process so everyone admitted they were instituting procedures as they went.

Out-processing of Peter Strzok in August, in the wake of the discovery of Strzok’s texts with Page, was a good deal more terse. That said, the Records Officer did review his phone for anything that had to be saved on September 6, 2017, and found nothing of interest.

Still, their Exit Forms show both returned their iPhone. (Strzok; Page)

It’s only in January 2018, as DOJ IG started to look into their texts, that Mueller’s office discovered they couldn’t account for Page’s iPhone. JMD ultimately found it, but not until September 2018. The phone showed that it had been reset to factory settings, which was standard DOJ policy, on July 31, 2017, two weeks after Page turned it over and left SCO.

In fall 2018 and again in January 2019, numerous people at DOJ tried to find alternative ways to reconstruct any texts Page and Strzok sent on their Mueller iPhones. Because the effort started over a year after they had stopped using the phones, neither DOJ nor Verizon had even log files from the texts anymore. So a DOJ official reviewed Strzok’s phone and found nothing, may not have reviewed Page’s phone, but nevertheless found no evidence Page tried to evade review.

That is, for the subject Judicial Watch was pursuing, the FOIA was a bust.

In response to the Page-Strzok scandal, Mueller appears to have adopted a standard higher than DOJ generally

The Page-Strzok files also suggest certain things about what Mueller did as his investigation was roiled by claims focusing on the two former FBIers.

  • It appears that, after the shit started hitting the fan, Mueller engaged in record-keeping above-and-beyond that required by DOJ guidelines (that’s what the frothers are complaining about)
  • When things started hitting the fan, Mueller’s Chief of Staff Aaron Zebley seems to have started taking a very active role in the response
  • FBI continued to issue Page and Strzok updated phones even while they had Mueller iPhones, which is probably the case for at least the FBI employees on Mueller’s team, making confusion about phones more likely
  • Both DOJ and Verizon would have some ability to reconstruct any texts for phones with problems identified in real time, as opposed to the year it took with Page and Strzok

Here’s the standard DOJ adopts with regards to the use of texts on DOJ-issued phones. DOJ guidelines for retaining texts all stem from discovery obligations — and DOJ, unlike FBI, puts the onus on the user to retain texts.

The OIG reviewed DOJ Policy Statement 0801.04, approved September 21, 2016, which establishes DOJ retention policy for email and other types of electronic messaging, to include text messages. Policy 0801.04 states that electronic messages related to criminal or civil investigations sent or received by DOJ employees engaged in those investigations must be retained in accordance with the retention requirements applicable to the investigation and component specific policies on retention of those messages.

OIG also reviewed DOJ Instruction 0801.04.02, approved November 22, 2016, which provides guidance and best practices on component use of electronic messaging tools and applications for component business purposes.

Section C of 0801.04.02 (Recordkeeping Guidance for Electronic Messaging Tools in Use in the DOJ) subsection 9 (Text Messaging), states that text messaging may be used by staff only if it has been approved by the Head of the Component and in the manner specifically permitted by written component policies. Additional guidance was provided in a memo from the Deputy Attorney General dated March 30, 20 I I, titled ‘Guidance on the Use, Preservation, and Disclosure of Electronic Communications in Federal Criminal Cases.’ The memo states that electronic communications should be preserved if they are deemed substantive. Substantive communications include:

    • Factual information about investigative activity
    • Factual information obtained during interviews or interactions with witnesses (including victims), potential witnesses, experts, informants, or cooperators
    • Factual discussions related to the merits of evidence
    • Factual information or opinions relating to the credibility or bias of witnesses, informants and potential witnesses; and
    • Other factual information that is potentially discoverable under Brady, Giglio, Rule 16 or Rule 26.2 (Jencks Act).

So people using DOJ phones are only required to keep stuff that is case related. DOJ IG had, in 2015, complained about DOJ’s retention of texts, but the standard remained unchanged in 2018.

In January 2018, after someone had leaked news of the Page-Strzok texts to the NYT and after DOJ released their texts to the press (possibly constituting a privacy violation and definitely deviating from the norm of not releasing anything still under investigation by DOJ IG) and after Senator Chuck Grassley and Ron Johnson started making unsubstantiated claims about the texts, Mueller’s Chief of Staff, Aaron Zebley appears to have taken a very active role in the response. That’s when Mueller Executive Officer Beth McGarry Mueller’s Chief of Staff sent Page and Strzok’s Exit Paperwork to Zebley. And that’s when Mueller and DOJ IG discovered no one could find Page’s phone.

Not said in any of these documents, but revealed in the DOJ IG Report, is that Page and Strzok continued to use their FBI Samsung phones, and indeed were issued updated Samsungs after being assigned to Mueller’s team.

Based on OIG’s examination of their FBI mobile devices, Page and Strzok also retained and continued to use their FBI mobile devices. Specifically, on or about May 18, 2017, Page received an FBI-issued Samsung Galaxy S7 mobile device to replace her previously-issued FBI Samsung Galaxy SS. On or about July 5, 2017, Strzok received an FBl-issued Samsung Galaxy S7 mobile device to replace his previously-issued FBI Samsung Galaxy S5.

This was already known, because that’s where all their compromising texts were. But among other things, it makes it clear that some Mueller team members (especially the FBI employees, virtually all of whose names are redacted), may also have continued to use their existing FBI issue phone even while using the Mueller iPhone. With the exception of the 70-something year old James Quarles, whose phone “wiped itself without intervention from him” in April 2018 and who did not use text or have any photos on it when it was wiped, the suspicious events Republicans are complaining about came from DOJ employees, who might be most likely to juggle multiple phones and passwords.

Finally, one more detail of note in the Page and Strzok documents pertains to the other revelations. As noted, as part of the effort to find any texts they might have sent, DOJ reached out to Verizon, to try to figure out what kind of text traffic had been on their phones. Verizon responded that it only keeps texting metadata for 365 days, with rolling age-off, so it couldn’t help (in fall 2018 and January 2019) to access what Page and Strzok had done with their phones in summer 2017. As part of that discussion, however, JMD’s Greer noted that “our airwatch logs may only go back 1 year.” Airwatch is the portal via which corporate users of iPhones track the usage of their employees. It means that so long as something happens with a phone within a year, some data should be available on Airwatch. That is to say, DOJ had two means by which to reconstruct the content of a phone with a problem discovered in real time, means not available given the delay in looking for Page and Strzok’s phones.

The log of phone reviews covering all Mueller personnel

Ultimately, Judicial Watch’s FOIA showed that the documents they were after — the paper trail on the Page and Strzok phones — backs up what has always been claimed about the phones. They were treated via routine process, but as a result there were no texts to review when DOJ IG got around to review them.

So they instead made a stink about just four pages in the release, what appears to be a log — probably started in January 2018, as the Page and Strzok issues continued to roil — of every instance where a Mueller staff phone got reviewed.

The log starts with Page, Strzok, and two other people whose identities are redacted. It has an additional number of entries interspersed with ones from January 2018 which may be those out-processed under DOJ’s normal terms, prior to the initiation of this log. After that, though, the log seems to show meticulous record-keeping both as people were out-processed and any time something went haywire with a phone.

Here, for example, is the entry showing that Kevin Clinesmith’s phone was reviewed on March 5, 2018, and two texts and three photos that were not required to be kept as a DOJ record were emailed to him.

Here, for example, is a record showing that the phone of Uzo Asonye, a local prosecutor added to Manafort’s tax cheat trial in EDVA, got cleared of ten voice mails that pre-dated his involvement with the Mueller team when he was out-processed from the Mueller team.

In other words, Mueller’s team made sure phones were clean, even if they hadn’t been when the came into the team.

Some of what the frothers are pointing to as suspicious is someone wiping their phone when they get it — good security practice and, since the phone is new to them, nothing that will endanger records.

In others of the instances the frothers are complaining about, the log shows that someone immediately alerted record-keepers when they wiped their phone, which (if there were a concern) would provide DOJ an opportunity to check Airwatch.

One thing Republicans are focusing most closely on is that Andrew Weissmann twice “accidentally” wiped his phone, having done so on March 8 and September 27, 2018.

Note, both these instances involve the same phone, and also the same phone he had in what appears to be the final inventory. So while this is not entirely above suspicion, it’s not the case that Weissmann kept wiping phones before DOJ had a chance to check what he had on there before he got a new one. Rather, it appears he wiped the same phone twice and told the record-keepers about it in real time. Moreover, the wipes do not correlate to one possible damning explanation of them, that Weissmann was trying to cover up leaks to the press that Manafort would later accuse him and the Mueller team generally of.

There appears to have been nothing unusual about Weissmann’s out-processing review in March 2019.

So when DOJ had a chance to look at how Weissmann had used his phone for the last six months he used a Mueller phone, it found nothing.

Another of the things Republicans find particularly suspicious is that the phones of Kyle Freeny and Rush Atkinson were both wiped within days of each other (Freeny is a woman, which some of the self-described experts on the Mueller investigation got wrong in their stories on this). For Freeny and one other person (likely an FBI agent), this appears to have been an out-processing review.

Note that here and in many other cases, the description uses the passive voice. “Was [accidentally] wiped,” with no subject identified. There’s good reason to believe — based on the Records Officer retroactive descriptions about Strzok’s phone, the occasional use of the first person, and multiple references to the Administrative Officer — that these are written from the voice of the Records Officer, not the lawyer or agent in question. That is, many of the incidences of descriptions that a phone “was wiped” in no way suggest the person used the phone wiped it. Rather, it seems to be the Records Officer or someone else in the review process. And for a number of those instances there’s a clear explanation why the phone was wiped, which would be normal process for most DOJ transitions in any case.

It does appear Atkinson’s phone was wiped just days after Freeny’s phone, though it was identified in plenty of time to obtain the metadata, if needed.

But like Weissmann, Atkinson’s out-processing review (curiously, the very last one from the entire Mueller team) showed nothing unusual.

In short, what the frothy right appears to have worked themselves up about is that after the conduct of Page and Strzok raised concerns, Mueller imposed record-keeping that DOJ would not otherwise have done, record-keeping that attempted (even though it is not required by DOJ policy) to track every single personal text sent on those phones. And for many of the instances that frothers look at with suspicion, they’re actually seeing, instead, a normal DOJ treatment of a phone.

Timeline

May 20, 2017: Add four accounts, give them iPhones, including Lisa Page and Brandon Van Grack.

May 31, 2017: Page and Strzok first logged into SCO laptops.

June 15, 2017: What kind of tracking do we need for phones? Answer: IMEI. [Includes non-exempt team through that date.]

July 13, 2017: Out-processing of Lisa Page, for whom the process was invented. [Includes list of admin personnel.]

July 17, 2017: Page had handed over her devices, SCO still working with JMD to figure out how to back up common drive.

July 27, 2017: Michael Horowitz tells Mueller of Page-Strzok texts he discovered.

July 31, 2017: Page phone reset to factory settings.

August 9, 2017: Strzok sends exit checklists.

August 10, 2017: Strzok separates from office.

September 6, 2017: Records Officer reviews Strzok’s phone.

November 30, 2017: Mike Flynn informed of Strzok’s texts.

December 2, 2017: NYT reports on Strzok’s texts.

December 13, 2017: DOJ releases first batch of Page-Strzok texts, while trying to hide they were the source.

January 19, 2018: Stephen Boyd informs Chuck Grassley of archiving problems.

January 22, 2018: Strzok’s Mueller iPhone located.

January 23, 2018: Attempt to get texts from Verizon, but both content and metadata no longer stored.

January 25, 2018: Beth McGarry sends Aaron Zebley exit forms from Strzok and Page.

January 26, 2018: LFW notes that they’ve lost Page’s phone, but hands the search off to JMD. Greer notes, specifically, however, that “SCO policy was to reuse them and not hold.”

Late January 2018: FBI Inspection Division finds FBI Samsung phones, provide to DOJ IG.

February 8, 2018: Trump supporter Cesar Sayoc starts plotting attack on Strzok and others.

March 5, 2018: Kevin Clinesmith’s out-processing shows nothing unusual.

March 8, 2018: Andrew Weissmann wipes his phone.

May 4, 2018: Page resigns from FBI.

June 2018: DOJ IG discovers more texts, changes conclusion of Midyear Exam report.

June 14, 2018: Release of Midyear Exam report.

August 10, 2018: Strzok fired from FBI.

Early September 2018: Justice Management Division finds Page’s Mueller iPhone, provides to DOJ IG.

September 13, 2018: SCO Records Officer contacts DOJ IG about what status they got Page’s phone in.

September 21, 2018: Draft language between records officer and Aaron Zebley for DOJ IG Report. Also an attempt to check Airwatch for backups to the phones, but they only go back one year.

September 27, 2018: Andrew Weissmann wipes his phone.

October 17, 2018: DOJ IG informs SCO Records Officer that they have the phone, but that it had been reset to factory settings.

October 22, 2018: DOJ IG Cyber Agent follows up about DOJ IG Report language.

November 15, 2018: FBI Data Collection tool not archiving texts reliably.

November 27, 2018: Kyle Freeny’s phone wiped as part of out-processing.

November 29, 2018: Rush Atkinson’s phone accidentally wiped.

Late December 2018: DOJ IG releases report on archiving of DOJ phones.

December 27, 2018: Zebley responds to Rudy Giuliani claim about destruction of evidence.

January 18, 2019: JMD asks Verizon for texting data for Page and Strzok’s phones, but Verizon’s metadata records only go back 365 days.

January 30-31, 2019: LFW asks to cancel Strzok’s phone.

March 28, 2019: Andrew Weissmann’s out-processing review shows nothing unusual.

June 11, 2019: Rush Atkinson’s out-processing review shows nothing unusual.

December 9, 2019: DOJ IG releases Carter Page IG Report.

Unclear date: Inventory of all phones.

HEARING THREAD: Special Counsel Robert Mueller

/282 Comments/in , /by

[Check the byline, thanks. /~Rayne]

Former Special Counsel Robert Mueller testifies before two different House committees today. This post is dedicated to these hearings. Please take any other topics to the open thread.

Hearing schedule:

• 8:30 a.m. ET – House Judiciary Committee (HJC) Hearing

Link to C-SPAN streaming

• 12:00 p.m. ET – House Permanent Select Committee on Intelligence (HPSCI) Hearing

Link to C-SPAN streaming

Who to follow:

https://twitter.com/emptywheel (of course)

https://twitter.com/bmaz (naturally)

https://twitter.com/BarbMcQuade – will be on MSNBC to cover at least one of these hearings

https://twitter.com/ZoeTillman – BuzzFeedNews

https://twitter.com/NatashaBertrand – Politico

https://twitter.com/BBuchman_CNS – CourthouseNews

https://twitter.com/jentaub – (late adder – she’s live tweeting a numbered thread)

Apart from our team, here’s a list containing these and other folks who cover Trump-Russia at https://twitter.com/raynetoday/lists/trump-russia.

According to late Tuesday evening reports, Aaron Zebley, former deputy to Mueller, will be sworn in and appear alongside Mueller during at least one of the House committee hearings. (I see differing reports that Zebley will appear before the Judiciary, Intelligence, or both committees.)

The right-wing/Trump supporters are completely freaking out about Zebley’s appearance, blabbering he “was an attorney for Justin Cooper, the IT staffer who set up #HillaryClinton’s private email server & the aide who destroyed Clinton’s old Blackberry phones with a hammer.” (source on Twitter)

The likely loudest GOP voices on the House Judiciary Committee: Doug Collins (ranking minority member, GA-9); Louis Gohmert (TX-1); Jim Jordan (OH-4); Matt Gaetz (FL-1). If past HJC hearings are predictive, expect lots of hot-headed pontificating and few rational questions. Hard to say who will be the worst of the lot but Gaetz has the foolhardiness of youth and past approval from Trump to goad him on. Jordan will focus on “insufficient evidence” to sow fear,  uncertainty and doubt about the Special Counsel’s report and the investigation.

As for the HPSCI, the GOP’s most problematic participant will be Devin Nunes (CA-22) who is the ranking minority member. He’s been meeting with Trump this week about a replacement for Director of National Intelligence Dan Coats (who Trump wants to jettison for being too determined to protect the country). At least the explanation offered is Coats’ replacement; it’s possible that Nunes has been meeting with Trump about Mueller’s appearance before the HPSCI.

Content here may be subject to updates.

Again, this post is dedicated to these hearings. Please take any other topics to the open thread.