Posts

Bill Barr Complains that His Special Counsel Was Unable to Match Robert Mueller’s Record of Success

Even before the Igor Danchenko trial, Billy Barr declared victory in defeat — arguing that if John Durham could just “fill in a lot of the blanks as to what was really happening,” the inevitable acquittal would still give Durham an opportunity to spin fairy tales about what Durham imagines happened.

“What these cases show is that these are difficult cases to win,” Barr said. “There’s a reason it takes so long, and you have to build up the evidence because at the end of the day, you’re going before these juries that aren’t going to be disposed to side with the people they view as supporting Trump.”

Danchenko is slated to go on trial next month on charges of lying to the FBI about the Steele dossier, for which he was the main source. The dossier claimed that Trump and members of his campaign and company had established extensive ties to the Russian government and had colluded during the 2016 election.

The trial is widely expected to be the final criminal prosecution from Durham’s investigation before he submits a report of his findings to Attorney General Merrick Garland.

But despite Durham’s limited success in the courtroom, Barr defended the investigation he ordered, saying the courtroom was allowing Durham to establish a record of what had occurred with the so-called Russiagate investigation.

“I think Durham got out a lot of important facts that fill in a lot of the blanks as to what was really happening,” Barr said. “My expectation is … the Danchenko trial will also allow for a lot of this story to be told, whether or not he’s ultimately convicted. I hope he’s convicted, but if he isn’t, I still think it provides an avenue to tell the story of what happened.”

Like an obedient puppy, Durham did use the trial as an opportunity to get extraneous details into the public record. On top of the $1 million dollar offer that Brian Auten said, vaguely, Christopher Steele might have gotten if he had corroborated the dosser — which has been treated like an FBI attempt to bribe a source for dirt on Trump and as the most exonerating possible detail, rather than an effort to investigate a real threat to the country — Durham went out of his way to give the full names of people at various meetings so Carter Page and Donald Trump can add them to lawsuits.

Mind you, along the way, the trial also revealed the FBI’s own assessment of Danchenko’s cooperation, which contributed to 25 investigations and which Barr burned to a crisp by exposing him, with Lindsey Graham’s help, as a source in 2020.

Q. And you were concerned, in July of 2020, when you became aware that Attorney General Barr was going to release a redacted version of Mr. Danchenko’s interview in January of 2017?

A. Yes.

Q. You were upset about that?

A. I was.

Q. You found out about that during a telephone conference, right?

A. I did.

Q. And you disagreed with that decision?

A. I did.

Q. The OIG had already completed a report on that investigation, correct?

A. Yes.

Q. And you thought that the release of that document was dangerous?

A. Yes.

Q. You even wrote up a memo of that phone call you were on in July of 2020 where you learned that they were going to publish a redacted version of his interview, correct?

A. I did.

[snip]

Q. And within an hour of Mr. Danchenko’s January interview being released to the senate judiciary committee, the senate judiciary committee, I won’t say who, released it to the public?

A. They did.

[snip]

Q. So, Agent Helson, you wrote in October of 2020 that from 2017 until present day, Mr. Danchenko had provided information on at least 25 FBI investigations assigned to at least six field offices?

A. Correct.

Q. In addition, he aided the United States Government by introducing the United States Government to a sub-source who had provided additional information separate to his report, correct?

A. Correct.

[snip]

Q. And it’s noted that he — his reporting contributed to at least 25 active FBI investigations.

[snip]

Q. In July of 2020 his identity became public after the release of the redacted version of his interview in January of 2017. Since that public disclosure, he has received threatening messages via social media and email. It’s resulted in significant damage to his reputation from false and baseless claims aimed to undermine his credibility. Those are your words, correct?

A. Correct.

Q. The Washington Field Office had assessed that this will have negative ramifications with respect to his ability to provide for his family via personal income for the foreseeable future, correct?

A. Correct.

Q. And while the FBI cannot promise complete anonymity to anyone who provides information, his identity became public only after the decision was made to release the redacted version of his interview, correct?

A. Correct.

Q. As a result of that act, his ability to continue to provide information viable to the FBI is diminished as is his ability to provide financial support to his family.

After the trial, Barr has been spending time on Fox News declaring — as much of the frothy right has — that this record, of how he deliberately harmed national security for revenge, exposed the corruption of what Barr calls “Russiagate,” the moniker frothers use to distract from the real substance of the Russian investigation.

I was disappointed, obviously. I think they did a good job prosecuting the case. Their ability to put evidence on, in a very difficult case, was limited by some rulings, and they weren’t able to get access to some witnesses overseas. So it was a tough — it was a tough case, so this should show people that it’s hard to win these cases, and sometimes it takes time to … to achieve justice. But as people say — I think Andy McCarthy said — the real public interest being served here was exposing the full extent of the corruption that was involved in Russiagate [sic] and the abuse by the FBI in that whole episode. And I think Durham is going to get a report out that’s gonna lay out all the facts.

Barr and everyone else are pointing to the exposures they and Durham made to justify their actions because they didn’t have evidence to support their claims.

Barr is whining that getting false statements convictions is hard. But Robert Mueller was able to prove that:

  • Alex Van der Zwaan lied to cover up his efforts, in conjunction with Konstantin Kilimnik and Rick Gates, to cover up Manafort’s effort to spin Ukraine’s politicized Yulia Tymoshenko prosecution during the 2016 election
  • George Papadopoulos lied to cover up his advance knowledge of the Russian effort to help Trump
  • Mike Flynn lied to cover up his back channel calls with Sergei Kislyak to undermine Obama Administration policy (and also that he was a paid agent of Turkey during the campaign)
  • Michael Cohen lied to hide the secret negotiations he had directly with the Kremlin about an impossibly lucrative real estate deal
  • Paul Manafort conspired to cover up a front organization he set up with Konstantin Kilimnik and (at a preponderance of the evidence standard) lied to cover up his August 2016 meeting with Kilimnik
  • Roger Stone lied and intimidated Randy Credico to cover up his real back channel to the Russian operation

I mean, Robert Mueller had no problem getting convictions, whether from guilty pleas, jury verdicts, or (in the case of Manafort’s lies about the August 2, 2016 meeting) a judge’s ruling.

One reason he had no problem was that these defendants were generally guilty of a lot more than just lying. It’s a lot easier to get Flynn to admit he lied about his back channel discussions with the Russian Ambassador, after all, when he was also on the hook for secretly being an agent of Turkey. It’s lot easier to get Papadopoulos to admit he lied about his advance warning of the Russian operation when he’s trying to stave off foreign agent charges tied to Israel. It’s a lot easier to get a jury verdict against Stone when he spent months plotting out his lies with multiple people on emails.

Mueller wasn’t able to get false statement verdicts from everyone, mind you. For example, because Steve Bannon and Erik Prince deleted their texts from early January 2017, Mueller did not charge them for false statements made to cover up meetings to set up a back channel with UAE and Russia. That’s one lesson that Durham should have taken to heart: Absent the mobile app records from Sergei Millian and Igor Danchenko, he had no way of knowing whether Millian called Danchenko on July 26, 2016.

That’s not the only evidentiary complaint Barr makes here. He’s complaining that Durham was unable to get hearsay admitted against Danchenko. He’s angry that Durham was not permitted to introduce Millian’s wild Twitter boasts as evidence without requiring Millian to show up and make those claims under oath. And he’s complaining that Durham wasn’t able to introduce his pee tape conspiracies without charging it.

But the most alarming of the former Attorney General’s statements — before and after the trial — embrace the notion that it is a proper goal of failed prosecutions to expose information that does not rise to the level of criminality.

As I’ll show in a follow-up, the Durham fiasco is part of a piece of Barr’s larger actions, both his other failed prosecutions — most notably, that of Greg Craig — but also his efforts to undo the convictions for which there was no reasonable doubt of guilt.

It’s not enough to talk about Durham’s unprecedented failure … it’s not enough to note that Durham and his prosecutors repeatedly failed to take basic investigative steps before embracing and charging conspiracy theories that juries didn’t buy … it’s not enough to note how, in an attempt to prove those conspiracy theories, Durham and his prosecutors and abused the prosecutorial system.

Durham’s entire project is a continuation of Barr’s unprecedented politicization of DOJ, one that not only places Republicans attempting to secretly work for hostile nations above the law, but that has made the country far less safe in many other ways.

It’s not just Durham prosecuted two men without any real hope of winning conviction, all to expose things that aren’t crimes. It’s that Billy Barr hired him to do just that.

Confirmed: John Durham Has Withheld Discovery That DOJ Already Disproved His Claims of Political Malice

In his reply filing in the fight over what evidence will be submitted at his trial, Michael Sussmann confirmed something I’ve long suspected: John Durham has not provided Sussmann with the discovery Durham would need to have provided to present his own conspiracy theories at trial without risking a major discovery violation.

Were the Special Counsel to try to suggest that Mr. Sussmann and Mr. Steele engaged in a common course of conduct, that would open the door to an irrelevant mini-trial about the accuracy of Mr. Steele’s allegations about Mr. Trump’s ties to Russia—something that, like the Alfa Bank allegations, many experts continue to believe in, and about which the Special Counsel has tellingly failed to produce any significant discovery.

Sussmann dropped this in the filing without fanfare. But it is clear notice that if Durham continues down the path he is headed, he may face discovery sanctions down the road.

I explained why that’s true in these two posts. A core tenet of Durham’s conspiracy theories is that the only reason one would use proven cybersecurity methods to test certain hypotheses about Donald Trump would be for malicious political reasons. Here’s how Durham argued that in his own reply.

As the Government will demonstrate at trial, it was also the politically-laden and ethically-fraught nature of this project that gave Tech Executive-1 and the defendant a strong motive to conceal the origins of the Russian Bank-1 allegations and falsely portray them as the organic discoveries of concerned computer scientists.

There’s no external measure for what makes one thing political and makes another thing national security. But if this issue were contested, I assume that Sussmann would point, first, to truth as a standard. And as he could point out, many of the hypotheses April Lorenzen tested, which Durham points to as proof the project was malicious and political, turned out to be true. They were proven to be true by DOJ. Some of those true allegations involved guilty pleas to crimes, including FARA, explicitly designed to protect national security; another involved Roger Stone’s guilty verdict on charges related to his cover-up of his potential involvement in a CFAA hacking case.

DOJ (under the direction of Trump appointee Rod Rosenstein, who in those very same years was Durham’s direct supervisor) has already decided that John Durham is wrong about these allegations being political. Sussmann has both truth and DOJ’s backing on his side that these suspicions, if proven true (as they were), would be a threat to national security. Yet Durham persists in claiming to the contrary.

Here’s the evidence proving these hypotheses true that Durham has withheld in discovery:

The researchers were testing whether Richard Burt was a back channel to the Trump campaign. And while Burt’s more substantive role as such a (Putin-ordered) attempt to establish a back channel came during the transition, it is a fact that Burt was involved in several events earlier in the campaign at which pro-Russian entities tried to cultivate the campaign, including Trump’s first foreign policy speech. Neither Burt nor anyone else was charged with any crime, but Mueller’s 302s involving the Center for National Interest — most notably two very long interviews with Dmitri Simes (one, updated, two, updated), which were still under investigation in March 2020 — reflect a great deal of counterintelligence interest in the organization.

The researchers were also testing whether people close to Trump were laundering money from Putin-linked Oligarchs through Cyprus. That guy’s name is Paul Manafort, with the assistance of Rick Gates. Indeed, Manafort was ousted from the campaign during the period researchers were working on the data in part to distance the campaign from that stench (though it didn’t stop Trump from pardoning Manafort).

A more conspiratorial Lorenzen hypothesis (at least on its face) was that one of the family members of an Alfa Bank oligarch might be involved — maybe a son- or daughter-in-law. And in fact, German Khan’s son-in-law Alex van der Zwaan was working with Gates and Konstantin Kilimnik in precisely that time period to cover up Manafort’s ties to those Russian-backed oligarchs.

Then there was the suspicion — no doubt driven, on the Democrats’ part, by the correlation between Trump’s request to Russia for more hacking and the renewed wave of attacks that started hours later — that Trump had some back channel to Russia.

It turns out there were several. There was the aforementioned Manafort, who in the precise period when Rodney Joffe started more formally looking to see if there was a back channel, was secretly meeting at a cigar bar with alleged Russian spy Konstantin Kilimnik discussing millions of dollars in payments involving Russian-backed oligarchs, Manafort’s plan to win the swing states, and an effort to carve up Ukraine that leads directly to Russia’s current invasion.

That’s the kind of back channel researchers were using proven cybersecurity techniques to look for. They didn’t confirm that one — but their suspicion that such a back channel existed proved absolutely correct.

Then there’s the Roger Stone back channel with Guccifer 2.0. Again, in this precise period, Stone was DMing with the persona. But the FBI obtained at least probable cause that Stone’s knowledge of the persona went back much further, back to even before the persona went public in June 2016. That’s a back channel that remained under investigation, predicated off of national security crimes CFAA, FARA, and 18 USC 951, at least until April 2020 and one that, because of the way Stone was scripting pro-Russian statements for Trump, might explain Trump’s “Russia are you listening” comment. DOJ was still investigating Stone’s possible back channel as a national security concern well after Durham was appointed to undermine that national security investigation by deeming it political.

Finally, perhaps the most important back channel — for Durham’s purposes — was Michael Cohen. That’s true, in part, because the comms that Cohen kept lying to hide were directly with the Kremlin, with Dmitri Peskov. That’s also true because on his call to a Peskov assistant, Cohen laid out his — and candidate Donald Trump’s — interest in a Trump Tower Moscow deal that was impossibly lucrative, but which also assumed the involvement of one or another sanctioned bank as well as a former GRU officer. That is, not only did Cohen have a back channel directly with the Kremlin he was trying to hide,  but it involved Russian banks that were far more controversial than the Alfa Bank ties that the researchers were pursuing, because the banks had been deemed to have taken actions that threatened America’s security.

This back channel is particularly important, though, because in the same presser where Trump invited Russia to hack his opponent more, he falsely claimed he had decided against pursuing any Trump Organization developments in Russia.

Russia that wanted to put a lot of money into developments in Russia. And they wanted us to do it. But it never worked out.

Frankly I didn’t want to do it for a couple of different reasons. But we had a major developer, particular, but numerous developers that wanted to develop property in Moscow and other places. But we decided not to do it.

The researchers were explicitly trying to disprove Trump’s false claim that there were no ongoing business interests he was still pursuing with Russia. And this is a claim that Michael Cohen not only admitted was false and described recognizing was false when Trump made this public claim, but described persistent efforts on Trump’s part to cover up his lie, continuing well into his presidency.

For almost two years of Trump’s Administration, Trump was lying to cover up his efforts to pursue an impossibly lucrative real estate deal that would have required violating or eliminating US sanctions on Russia. That entire time, Russia knew Trump was lying to cover up those back channel communications with the Kremlin. That’s the kind of leverage over a President that all Americans should hope to avoid, if they care about national security. That’s precisely the kind of leverage that Sally Yates raised when she raised concerns about Mike Flynn’s public lies about his own back channel with Russia. Russia had that leverage over Trump long past the time Trump limped out of a meeting with Vladimir Putin in Helsinki, to which Trump had brought none of the aides who would normally sit in on a presidential meeting, looking like a beaten puppy.

Durham’s failures to provide discovery on this issue are all the more inexcusable given the fights over privilege that will be litigated this week.

As part of the Democrats’ nesting privilege claims objecting to Durham’s motion to compel privileged documents, Marc Elias submitted a declaration describing how, given his past knowledge and involvement defending against conspiracy theory attacks on past Democratic presidential candidates launched by Jerome Corsi and Donald Trump, and given Trump’s famously litigious nature, he believed he needed expertise on Trump’s international business ties to be able to advise Democrats on how to avoid eliciting such a lawsuit from Trump. (Note, tellingly, Durham’s motion to compel doesn’t mention a great deal of accurate Russian-language research by Fusion — to which Nellie Ohr was just one of a number of contributors — that was never publicly shared nor debunked as to quality.)

There are four redacted passages that describe the advice he provided; he is providing these descriptions ex parte for Judge Cooper to use to assess the Democrats’ privilege claims. Two short ones probably pertain to the scope of Perkins Coie’s relationship with the Democratic committees. Another short one likely describes Elias’ relationship, and through him, Fusion’s, with the oppo research staff on the campaign. But the longest redaction describing Elias’ legal advice, one that extends more than five paragraphs and over a page and a half, starts this way:

That is, the introduction to Elias’ description of the privilege claims tied to the Sussmann trial starts from Trump’s request of Russia to hack Hillary. Part of that sentence and the balance of the paragraph is redacted — it might describe that immediately after Trump made that request, the Russians fulfilled his request — but the redacted paragraph and the balance of the declaration presumably describes what legal advice he gave Hillary as she faced a new onslaught of Russian hacking attempts that seemingly responded to her opponent’s request for such hacking.

Given what Elias described about his decision to hire Fusion, part of that discussion surely explains his effort to assess an anomaly identified independently by researchers that reflected unexplained traffic between a Trump marketing server and a Russian bank. Elias probably described why it was important for the Hillary campaign to assess whether this forensic data explained why Russian hackers immediately responded to Trump’s request to hack her.

As I have noted, in past filings Durham didn’t even consider the possibility that Elias might discuss the renewed wave of hacking that Hillary’s security personnel IDed in real time with Sussmann, Perkins Coie’s cybersecurity expert.

It’s a testament to how deep John Durham is in his conspiracy-driven rabbit hole that he assumes a 24-minute meeting between Marc Elias and Michael Sussmann on July 31, 2016 to discuss the “server issue” pertained to the Alfa Bank allegations. Just days earlier, after all, Donald Trump had asked Russia to hack Hillary Clinton, and within hours, Russian hackers obliged by targeting, for the first time, Hillary’s home office. Someone who worked in security for Hillary’s campaign told me that from his perspective, the Russian attacks on Hillary seemed like a series of increasing waves of attacks, and the response to Trump’s comments was one of those waves (this former staffer documented such waves of attack in real time). The Hillary campaign didn’t need Robert Mueller to tell them that Russia seemed to respond to Trump’s request by ratcheting up their attacks, and Russia’s response to Trump would have been an urgent issue for the lawyer in charge of their cybersecurity response.

It’s certainly possible this reference to the “server” issue pertained to the Alfa Bank allegations. But Durham probably doesn’t know; nor do I. None of the other billing references Durham suggests pertain to the Alfa Bank issue reference a server.

Durham took a reference that might pertain to a discussion of a correlation between Trump’s ask and a renewed wave of Russian attacks on Hillary (or might pertain to the Alfa Bank anomaly), and assumed instead it was proof that Hillary was manufacturing unsubstantiated dirt on her opponent. He never even considered the legal challenges someone victimized by a nation-state attack, goaded by her opponent, might face.

And yet, given the structure of that redaction from Elias, that event is the cornerstone of the privilege claims surrounding the Alfa Bank allegations.

Because of all the things I laid out in this post, Judge Cooper may never have to evaluate these privilege claims at all. To introduce privileged evidence, Durham has to first withstand:

  • Denial because his 404(b) notice asking to present it was late, and therefore forfeited
  • Denial because Durham’s motion to compel violated local rules and grand jury process, in some ways egregiously
  • Rejection because most of the communications over which the Democrats have invoked privilege are inadmissible hearsay
  • The inclusion or exclusion of the testimony of Rodney Joffe, whose privilege claims are the most suspect of the lot, but whose testimony would make the communications Durham deems to be most important admissible

Cooper could defer any assessment of these privilege claims until he decides these other issues and, for one or several procedural reasons, simply punt the decision entirely based on Durham’s serial failures to follow the rules.

Only after that, then, would Cooper assess a Durham conspiracy theory for which Durham himself admits he doesn’t have proof beyond a reasonable doubt. As part of his bid to submit redacted and/or hearsay documents as exhibits under a claim that this all amounted to a conspiracy (albeit one he doesn’t claim was illegal), Durham argues that unless he can submit hearsay and privileged documents, he wouldn’t otherwise have enough evidence to prove his conspiracy theory.

Nor is evidence of this joint venture gratuitous or cumulative of other evidence. Indeed, the Government possesses only a handful of redacted emails between the defendant and Tech Executive-1 on these issues. And the defendant’s billing records pertaining to the Clinton Campaign, while incriminating, do not always specify the precise nature of the defendant’s work.

Accordingly, presenting communications between the defendant’s alleged clients and third parties regarding the aforementioned political research would hardly amount to a “mini-trial.” (Def. Mot. at 20). Rather, these communications are among the most probative and revealing evidence that the Government will present to the jury. Other than the contents of privileged communications themselves (which are of course not accessible to the Government or the jury), such communications will offer some of the most direct evidence on the ultimate question of whether the defendant lied in stating that he was not acting for any other clients.

In short, because the Government here must prove the existence of client relationships that are themselves privileged, it is the surrounding events and communications involving these clients that offer the best proof of those relationships.

Moreover, even if the Court were to find that no joint venture existed, all of the proffered communications are still admissible because, as set forth in the Government’s motions, they are not being offered to prove the truth of specific assertions. Rather, they are being offered to prove the existence of activities and relationships that led to, and culminated in, the defendant’s meeting with the FBI. Even more critically, the very existence of these written records – which laid bare the political nature of the exercise and the numerous doubts that the researchers had about the soundness of their conclusions – gave the defendant and his clients a compelling motive, separate and apart from the truth or falsity of the emails themselves, to conceal the identities of such clients and origins of the joint venture. Accordingly, they are not being offered for their truth and are not hearsay.

This passage (which leads up to a citation from one of the Georgia Tech researchers to which Sussmann was not privy that the frothers have spent the weekend drooling over) is both a confession and a cry for help.

In it, Durham admits he doesn’t actually have proof that the conspiracy he is alleging is the motive behind Michael Sussmann’s alleged lie.

He’s making this admission, of course, while hiding the abundant evidence — evidence he didn’t bother obtaining before charging Sussmann — that Sussmann and Joffe acceded to the FBI request to help kill the NYT story, which substantiates Sussmann’s stated motive.

And then, in the same passage, Durham is pointing to that absence of evidence to justify using that same claimed conspiracy for which he doesn’t have evidence to pierce privilege claims to obtain the evidence he doesn’t have. It’s a circular argument and an admission that all the claims he has been making since September are based off his beliefs about what must be there, not what he has evidence for.

Thus far the researchers’ beliefs about what kind of back channels they might find between Trump and Russia have far more proof than Durham’s absence of evidence.

Again, Durham doesn’t even claim that such a conspiracy would be illegal (much less chargeable under the statute of limitations), which is why he didn’t do what he could have had he been able to show probable cause that a crime had been committed: obtaining the communications with a warrant and using a filter team. Bill Barr’s memoir made it quite clear that he appointed Durham not because a crime had been committed, but because he wanted to know how a “bogus scandal” in which DOJ found multiple national security crimes started. ”Even after dealing with the Mueller report, I still had to launch US Attorney John Durham’s investigation into the genesis of this bogus scandal.” In his filing, Durham confesses to doing the same, three years later: using his feelings about a “bogus scandal” to claim a non-criminal conspiracy that he hopes might provide some motive other than the one — national security — that DOJ has already confirmed.

An absolutely central part of Durham’s strategy to win this trial is to present his conspiracy theories, whether by belatedly piercing privilege claims he should have addressed before charging Sussmann (even assuming he’ll find what he admits he doesn’t have proof is there), or by presenting his absence of evidence and claiming it is evidence. He will only be permitted to do if Judge Cooper ignores all his rule violations and grants him a hearsay exception.

But if he manages to present his conspiracy theories, Sussmann can immediately pivot and point out all the evidence in DOJ’s possession that proves not just that the suspicions Durham insists must be malicious and political in fact proved to be true, but also that DOJ — his former boss! — already deemed these suspicions national security concerns that in some cases amounted to crimes.

John Durham’s entire trial strategy consists of claiming that it was obviously political to investigate a real forensic anomaly to see whether it explained why Russia responded to Trump’s call for more hacks by renewing their attack on Hillary. He’s doing so while withholding abundant material evidence that DOJ already decided he’s wrong.

So even if he succeeds, even if Cooper grants him permission to float his conspiracy theories and even if they were to succeed at trial, Sussmann would have immediate recourse to ask for sanctions, pointing to all the evidence in DOJ’s possession that Durham’s claims of malice were wrong.

Update: The bad news I’m still working through my typos, with your help, including getting the name of Dmitri Simes’ organization wrong. The good news is the typos are probably due to being rushed out to cycle in the sun, so I have a good excuse.

Update: Judge Cooper has issued an initial ruling on Durham’s expert witness. It limits what Durham presents to the FBI investigation (excluding much of the CIA investigation he has recently been floating), and does not permit the expert to address whether the data actually did represent communications between Trump and Alfa Bank unless Sussmann either affirmatively claims it did or unless Durham introduced proof that Sussmann knew the data was dodgy.

Finally, the Court takes a moment to explain what could open the door to further evidence about the accuracy of the data Mr. Sussmann provided to the FBI. As the defense concedes, such evidence might be relevant if the government could separately establish “what Mr. Sussmann knew” about the data’s accuracy. Data Mot. at 3. If Sussmann knew the data was suspect, evidence about faults in the data could possibly speak to “his state of mind” at the time of his meeting with Mr. Baker, id., including his motive to conceal the origins of the data. By contrast, Sussmann would not open the door to further evidence about the accuracy of the data simply by seeking to establish that he reasonably believed the data were accurate and relied on his associates’ representations that they were. Such a defense theory could allow the government to introduce evidence tending to show that his belief was not reasonable—for instance, facially obvious shortcomings in the data, or information received by Sussmann indicating relevant deficiencies.

Ultimately, Cooper is treating this (as appropriate given the precedents in DC) as a question of Sussmann’s state of mind.

Importantly, this is what Cooper says about Durham blowing his deadline (which in this case was a deadline of comity, not trial schedule): he’s going to let it slide, in part because Sussmann does not object to the narrowed scope of what the expert will present.

Mr. Sussmann also urges the Court to exclude the expert testimony on the ground that the government’s notice was untimely and insufficiently specific. See Expert Mot. at 6–10; Fed. R. Crim. P. 16(a)(1)(G). Because the Court will limit Special Agent Martin’s testimony largely to general explanations of the type of technical data that has always been part of the core of this case—much of which Mr. Sussmann does not object to—any allegedly insufficient or belated notice did not prejudice him. See United States v. Mohammed, No. 06-cr-357, 2008 WL 5552330, at *3 (D.D.C. May 6, 2008) (finding that disclosure nine days before trial did not prejudice defendant in part because its subject was “hardly a surprise”) (citing United States v. Martinez, 476 F.3d 961, 967 (D.C. Cir. 2007)).

This suggests Cooper may be less willing to let other deadlines slide, such as the all-important 404(b) one.

Six Investigative Files from the Mueller Investigation Durham May Have Just Committed to Providing Michael Sussmann

As I noted in this thread, while John Durham and Michael Sussmann have battling motions in limine about whether Durham can introduce evidence of his own conspiracy theory about the Democrats packaging dirt against Donald Trump, Durham somehow forgot to file a motion in limine to prevent Sussmann from raising facts that show how reasonable it was to search for ties between Trump and Russia in 2016.

It’d be hard to see how he could do that anyway. After all, there’s abundant evidence that the reason researchers and Democratic operatives alike focused their effort to understand the DNS anomaly in late July and thereafter is because of the things Trump said on July 27, 2016.

TRUMP: Why do I have to (ph) get involved with Putin? I have nothing to do with Putin. I’ve never spoken to him. I don’t know anything about him other than he will respect me. He doesn’t respect our president. And if it is Russia — which it’s probably not, nobody knows who it is — but if it is Russia, it’s really bad for a different reason, because it shows how little respect they have for our country, when they would hack into a major party and get everything. But it would be interesting to see — I will tell you this — Russia, if you’re listening, I hope you’re able to find the 30,000 e-mails that are missing. I think you will probably be rewarded mightily by our press. Let’s see if that happens. That’ll be next. Yes, sir…

[snip]

TRUMP: Excuse me, listen. We wanted to; we were doing Miss Universe 4 or 5 years ago in Russia. It was a tremendous success. Very, very successful. And there were developers in Russia that wanted to put a lot of money into developments in Russia. And they wanted us to do it. But it never worked out.

Frankly I didn’t want to do it for a couple of different reasons. But we had a major developer, particular, but numerous developers that wanted to develop property in Moscow and other places. But we decided not to do it.

[snip]

QUESTION: I would like to know if you became president, would you recognize (inaudible) Crimea as Russian territory? And also if the U.S. would lift sanctions that are (inaudible)?

TRUMP: We’ll be looking at that. Yeah, we’ll be looking. [my emphasis]

Particularly if Sussmann knew in real time — as the Hillary campaign did — that a renewed wave of attacks by Russia started immediately after Trump’s comments, Sussmann can fairly explain that, in their attempt to understand the correlation suggesting causation between Trump’s request and the attack, the anomalous DNS data seeming to suggest communication between Trump and Alfa Bank might explain the connection. In fact, the inference that Russia’s back channel was Alfa Bank had some backing (LetterOne Board Member Richard Burt had been involved in reviewing Trump’s first foreign policy speech), though the actual back channels were Paul Manafort and Roger Stone. So it was reasonable to try to understand the possibility of that back channel and reasonable to share with the FBI data reflecting that possibility.

For his part, given the way that Durham has always obscured when in late July the effort to research Trump got started, he’s likely to rely on a document — which may be dated July 26 or may be dated July 28, but which the Intelligence Community judged might be a fabrication in real time — claiming that Hillary had already decided to tie Trump and Russia together.

Given the timing of the increased effort to understand the Alfa Bank anomaly and the explicit references to Trump’s July 27 comments, Sussmann must be permitted to show how Trump’s July 27 comments were part of his state of mind when he went to the FBI and made his actions (and, indeed, the privilege claims Durham is now trying to pierce) reasonable.

Had Durham left well enough alone, that might be all Sussmann could ask to present at trial. But if Durham tries to rely on that sketchy intelligence report or if he wins his bid to present his full conspiracy theory, then it opens him up to far great discovery obligations. They include the investigative files on the following people Mueller investigated:

Richard Burt: The Mueller Report describes that, after Vladimir Putin ordered Petr Aven to seek to establish a back channel with Trump after the election, Aven approached Richard Burt, with whom he served on the board of LetterOne, to attempt to reach out. But Burt had played a role in outreach to the Trump campaign long before that, in an April 2016 Center for National Interest review of Trump’s first foreign policy speech. Burt was also present at two CNI-hosted speeches, one in June and August, at which “the participants addressed U.S. relations with Russia, including how U.S. relations with NATO and European countries affected U.S. policy toward Russia.” Indeed, according to Burt’s interview report, he was the one focusing on NATO and Europe. Burt’s publicly released interview report remains heavily redacted, including numerous redactions of material that was, in March 2020, still under investigation. Given that Durham wants to litigate whether it was realistic to think Trump might have a back channel through Richard Burt, Durham probably needs to provide the Burt-related materials to Sussmann.

Roger Stone: It is a fact that, on July 31, 2016 — during a period, starting at least by July 25, when he was actively seeking to optimize the files Russia stole from Hillary — Roger Stone had two conversations with Donald Trump and afterwards sent draft tweets promising a new peace deal with Putin for Trump to use in the coming days.

(U) On Sunday July 31, at 9:15 p.m., the day after speaking at length with Manafort, Stone called Gates.1550 Ten minutes later, Stone had two phone calls with Trump that lasted over ten minutes. 1551 Stone then emailed Jessica Macchia, one of Trump’s assistants, eight draft tweets for Trump, under the subject line “Tweets Mr. Trump requested last night.”1552 Many of the draft tweets attacked Clinton for her adversarial posture toward Russia and mentioned a new peace deal with Putin, such as “I want a new detente with Russia under Putin.”1553 (U) At 10:45 p.m. that same evening, Stone emailed Corsi again with the subject line “Call me MON[day]” and writing that “Malloch should see Assange.”1554 (U) The next morning, August 1, Stone again spoke twice with Trump. 1555 Stone later informed Gates of these calls. 1556 According to an email that morning from Stone to Macchia, Trump had “asked [Stone] for some other things” that Stone said he was “writing now.”1557

1551 (U) Records reviewed by the Committee showed a six minute call from Stone to Trump on July 31 at approximately 9:25 p.m. and a five-minute call from Stone to himself at approximately 9:36 p.m. See AT&T Toll records, Roger Stone/Drake Ventures (ATTSSCI00039). Evidence introduced at trial against Stone showed corresponding calls with Trump at those same times and for the same length of time, including a call from Trump at the number “-1” to Stone at 9:36 p.m. See United States v. Stone, Gov. Ex. 148; United States v. Stone, Gov. Ex. 164; Testimony of Michelle Taylor, United States v. Stone, pp. 348-349. This suggests that that Trump’s phone would sometimes appear in another person’s phone records as that person calling him or herself, or as a call with phone number “-1.” A number of such calls appear in Stone’s records and others, including records provided by Donald Trump Jr., during relevant time periods, but the Committee did not investigate those additional calls further.

1552 (U) Email, Stone to Macchia, July 31, 2016 (TRUMPORG_18_001307).

1553 (U) Ibid One draft tweet referenced the Clinton Foundation. Stone followed up about the tweets with Rhona Graff the following morning, August 1, to make sure Trump received them. Email, Stone to Graff, August 1, 2016 (TRUMPORG _ 18_001310).

1555 (U) AT&T toll records, Roger Stone/Drake Ventures.

1556 (U) Text message, Stone to Gates, August 2, 2016 (United States v. Stone, Gov. Ex. 20) (“Spoke to Trump a cpl of times.”).

1557 (U) Email, Stone to Macchia, August 1, 2016 (TRUMPORG_l8_001315).

It is also a fact that while most of Trump’s aides said that Trump ad-libbed that “Are you listening” comment, Rick Gates testified that Stone was stating — before flip-flopping on the issue days later — that Russia may have the emails, implying that Stone could have been the source of that comment along with the scripted tweets. Indeed, from that April 2016 foreign policy speech, Stone was demanding that Gates allow him to have input on Trump’s foreign policy statements.

It is also a fact that by August 2018, the FBI had evidence that led them to suspect that Stone had learned of the Guccifer 2.0 persona before it went live on June 15, 2016. Given how centrally Durham has made the July 2016 start date of the research into the Alfa Bank anomalies, he may be on the hook for providing details showing that Stone already had a back channel by then. That’s all the more true if Durham wants to rely on that intelligence product focusing on Guccifer 2.0.

Paul Manafort, Konstantin Kilimnik, and Alex Van der Zwaan: With his motion in limine, Durham has formally noticed that he wants to litigate at trial whether it was fair for people acting on behalf of Hillary — to say nothing of researchers collaborating with DARPA and the FBI or a private citizen with an established record conducting infosec inquiries into threats to the United States — to want to inquire into the following topics:

  • Illegal financial relationships between Oligarchs close to Putin and those close to Trump
  • Laundering of Russian-backed money through Cyprus
  • The actions of those married to the children of Alfa Bank’s founders
  • Sanctions violations and FEC regulations implicated by Fancy Bear’s ongoing attack on the election

Durham suggests the only reason someone would want to research such topics was unfounded animus directed at Trump. But the results of the Mueller inquiry — to say nothing of what the ongoing investigation confirming Konstanin Kilimnik did, in fact, share Trump’s campaign strategy with Russian intelligence agencies — prove that all these concerns not only had merit, but proved to be absolutely correct.

At least one person close to Donald Trump, Manafort, did have illegal financial relationships with Oligarchs close to Putin: the Campaign Manager who got fired for such ties in the middle of this intensifying focus on the Alfa Bank anomalies. That person did launder the money he made from them through Cyprus. How that Campaign Manager — who was working for “free” — got paid remains a mystery, implicating FEC regulations. And some of the other actions implicating the Russian operation that FEC’s General Counsel found reason to believe amounted to a campaign finance violations include:

  • Trump’s request, “Russia are you listening?”
  • Illegal donations from Cambridge Analytica
  • An in-kind donation for hacking Hillary
  • Internet Research Agency donation of trolling to support Trump

While Democrats didn’t block the much smaller violation tied to the dossier, Republicans have blocked Trump from any accountability for his likely campaign finance violations involved with accepting help from Russia.

Meanwhile, in the very same weeks when those Durham claims were involved in a malicious conspiracy targeting the children-in-laws of Alfa Bank’s founders, German Khan’s son-in-law, Alex Van der Zwaan, was taking action on Rick Gates’ orders to cover up Manafort’s ties to those Oligarchs. Van der Zwaan would, at first, lie to Mueller about the actions he took in response to Gates’ orders starting on September 7, 2016, including a call to Kilimnik, whom Van der Zwaan understood to be a former Russian spy.

In or about September 2016, VAN DER ZW AAN spoke with both Gates and Person A regarding the Report. In early September 2016, Gates called VAN DER ZWAAN and told him to contact Person A. After the call, Gates sent VAN DER ZWAAN documents including a preliminary criminal complaint in Ukraine via an electronic application called Viber. VAN DER ZWAAN then called Person A and discussed in Russian that formal criminal charges might be brought against a former Ukrainian Minister of Justice, Law Finn A, and Manafort. VAN DER ZWAAN recorded the call. VAN DER ZWAAN then called the senior partner on the Report at Law Firm A and partially recorded that call. Finally, VAN DER ZWAAN called Gates and recorded the call. VAN DER ZWAAN also took notes of the calls.

If Durham wants to argue that it was unreasonable to inquire into whether German Khan’s son-in-law might be involved in illicit doings with Oligarchs tied to Putin and people close to Trump, he needs to provide Sussmann the details of the cover-up that Van der Zwaan conducted with Kilimnik and Rick Gates just days before Sussmann’s meeting with James Baker. He needs to allow Sussmann to show that evidence in DOJ’s possession shows that not only was it a valid subject of inquiry, but precisely the thing April Lorenzen was concerned might be going on was going on, in real time.

Michael Cohen: With his untimely 404(b) notice, Durham informed Sussmann that he also wants to claim the dossier was part of the conspiracy he was trying to cover up by lying, even though he has provided no evidence that Sussmann knew Christopher Steele was sharing those reports with the FBI. By making it an issue, though, Durham also makes Michael Cohen’s real secret communications with the Kremlin, which disinformation in the dossier seemed tailored to obscure, an issue. That’s all the more true given that Trump’s “Russia are you listening” comments also included statements that — Cohen has described recognizing in real time — were a lie that covered up that Trump was still chasing an impossibly lucrative real estate deal that involved a former GRU officer and one of two sanctioned banks when he claimed to have decided not to pursue one. This topic is all the more pertinent given that Trump Organization withheld the documents reflecting these secret back channel communications from Congress and Trump demonstrably lied to Mueller about the topic. If Durham wants to argue it was implausible to think Michael Cohen had back channel communications with the Kremlin, then he needs to give Sussmann all the evidence that not only was it not implausible, but it was fact.

I’ve seen no hint that Sussmann’s attorneys want to turn Sussmann’s trial into the trial of Donald Trump’s 2016 campaign that we never got. They seem content to argue that the alleged lie was not material and the evidence that Sussmann lied in the way Durham thinks he did is thin, if not inadmissible.

But Durham has chosen a different path. He has wildly expanded the scope of what kind of questions he think are material to this case. And because he has chosen that dramatically expanded path, he has made all of this evidence material under discovery obligations.

The evidence to prove that the suspicions Sussmann and others had in 2016 were not just justified, but turned out to be true, are now material to discovery. If Durham doesn’t start turning over vast swaths of material about the ties of Trump’s top associates with Russia to Sussmann, he risks dismissal for discovery violations.

John Durham Unveils His Post-Putin Puppet Strategy

I first complained publicly about the Alfa Bank allegations on November 1, 2016. I raised questions about the provenance of the Steele dossier the day after it was released, on January 11, 2017. I started raising concerns that Russia had succeeded in injecting the dossier with disinformation just a year later — literally years before the Republicans investigating it full-time did. When Democrats revealed that they had paid for the dossier in October 2017, I wrote a very long post labeling the entire project “fucking stupid.” Part of that was about the Democrats’ delayed admission they were behind the dossier. But part of that was because of the way the dossier distracted from Trump’s very real very concerning ties to Russia.

It has been clear for some time that Steele’s reports had some kind of feedback loop, responding to information the Democrats got. That was most obvious with respect to the September 14 Alfa Bank report, which was obviously written after first news of the Alfa Bank/Trump Tower story, which was pushed by Democratic partisans. Particularly given that we know the released report is a selective release of just some reports from the dossier, the inclusion of Alfa Bank in that release makes no sense. Even if reports about old corrupt ties between Alfa and Putin are true (as if Democratic politicians and corrupt American banks never have old ties), the inclusion of the Alfa report in the dossier on Trump made zero sense.

Which is why Alfa Bank decided — after consulting with big Republican lawyers like Viet Dinh and soon-to-be DOJ Criminal Division Chief Brian Benczkowski — to sue for defamation. Now I understand why (particularly given that Republicans seem to have known who paid for the dossier for some time). I’m not sure Alfa Bank executives pass the bar for defamation here (though the publication of a report that misspelled Alfa’s name is pretty damning), but the fact that Elias paid for this dossier on behalf of the Democrats is going to make that defamation case far more explosive (and I’ll be surprised if Elias doesn’t get added into the mix).

As I said when I began this: I have no doubt Russia tampered with the election, and if the full truth comes out I think it will be more damning than people now imagine.

But the Democrats have really really really fucked things up with their failures to maintain better ethical distance between the candidate and the dossier, and between the party and the FBI sharing. They’ve made things worse by waiting so long to reveal this, rather that pitching it as normal sleazy political oppo research a year ago.

The case of Russian preference for Trump is solid. The evidence his top aides were happy to serve as Russian agents is strong.

But rather than let FBI make the case for that, Democrats instead tried to make their own case, and they did in such a way as to make the very solid case against Trump dependent on their defense of the dosser, rather than on better backed claims released since then.

Boy it seems sadly familiar, Democrats committing own goals like this. And all that’s before where the lawfare on this dossier is going to go.

I may be the earliest and most prescient critic of all this, in either party. Sit down, Kash Patel! Sit down, Chuck Ross!

Sit down, John Durham!

And boy was I right, way back in October 2017, about where this was going to go.

But I have also shown that people close to Oleg Deripaska succeeded in exploiting this project as part of a vicious double game, victimizing both Hillary Clinton and Paul Manafort, making it more likely Manafort would cooperate in the Russian operation against Hillary, which he did. I have shown that the most obvious disinformation in the dossier, probably sourced to Dmitri Peskov — claiming that Michael Cohen had secret communications with the Kremlin on election interference — served to hide Michael Cohen’s very real secret communications with Peskov on a Trump Tower deal involving sanctioned banks and a former GRU official. I have more recently confirmed that someone who claimed to work for an FSB front was pushing the Alfa Bank allegations more aggressively than Michael Sussmann in October 2016; that same person was using Internet routing records to support a false story in May 2016, the same month the DNS anomalies started. I showed that large numbers of Republicans rationalize their attack on democracy on January 6 based on the dossier, even while they accept the dossier was Russian disinformation, thereby literally claiming that Russian disinformation convinced them to attack American democracy.

And Russia’s wild success at using this to sow division continues, even as Russia massacres children in an assault on Ukrainian democracy. Just Monday, after all, John Durham suggested that because private citizen April Lorenzen investigated the actions of the people married to Alfa Bank Oligarch children, she was part of a criminal conspiracy, even though it is a provable fact that the man married to the daughter of an Alfa Bank founder, Alex Van der Zwaan, was — in those very same weeks!!! — acting on orders from Russian spy Konstantin Kilimnik to cover up Manafort’s ties to the Oligarchs behind the 2016 election interference. Durham is so far down his conspiratorial rabbit hole, he doesn’t even realize he’s trying to criminalize being right about a real threat to democracy.

Which brings us to Durham’s motion to compel submitted last night, predictably asking Judge Christopher Cooper to review the privilege claims behind the Democrats and Fusion GPS’ privilege claims. I’m pretty sympathetic that some of the privilege claims the parties involved have made are bullshit, just as the claims Trump’s supporters have made to hide the events that led up to January 6 or any number of other things that go well beyond election-year rat-fucking are obviously bullshit. But it now seems clear that Durham is making the same error Alfa Bank did, not only assuming that everyone pushing the Alfa Bank allegations was being directed by the Democrats (when Lorenzen played a more important role), but also assuming people working for Hillary were behind all new push on the story; I’ve proven that was false.

Worse still, the specific form of Durham’s demand and its timing not only prove Durham’s bad faith, but strongly suggest that Durham viewed his own investigation to form part of a symbiotic whole with the Alfa Bank lawfare (the lawfare I rightly identified in 2017) still exploiting the dissension sowed by Russia in 2016. In the month of March, Durham did three things that were, as Sussmann’s lawyers described, “wildly untimely” for a trial scheduled to start in May. After getting an approved extension to their CIPA deadline, Durham filed a 404(b) notice on March 23; those notices were due on March 18. Durham told Sussmann of a new expert witness in the last days in March; that notice was also due by March 18. And then, on March 30, Durham told Sussmann he was going to attempt to pierce privilege claims that had been under discussion for a year.

All these belated steps look like a desperate, last minute attempt to change strategy. And it seems likely that the strategy change was necessitated, at least in part, by the stay and then dismissal of Alfa Bank’s lawfare, necessitated by the sanctions imposed by Putin’s aggression in Ukraine.

Consider the following timeline:

  • February 9: DC Superior Judge Shana Frost Matini observes that Durham case and Alfa Bank lawsuit appear reading from the same script and stays Alfa’s motions until after the Sussmann trial
  • February 11: In the wake of the expiration of the statute of limitation on a February 9, 2017 Sussmann meeting at the CIA, Durham files an inflammatory and belated conflict filing, raising new allegations and setting off death threats
  • Mid-February 2022: Alfa Bank continues its efforts to breach the privilege and Fifth Amendment claims of John Durham’s subjects
  • February 22: Russia invades Ukraine in an attempt to rid it of its democracy and sovereignty
  • February 24: A first set of sanctions on Alfa Bank
  • March 3: Durham asks for an extension on filing his CIPA filing from March 18 to March 25
  • March 4: Alfa dismisses John Doe lawsuits
  • March 18: Alfa dismisses Fusion GPS lawsuit
  • March 23: Durham files a Supplement to his 404(b) notice making wild new claims about the scope of the material pertinent to Sussmann’s alleged lie
  • March 25: Durham submits his CIPA notice, probably asking to use an intelligence product viewed as possible Russian disinformation in real time (and, given what we’ve learned about Roger Stone’s activities before that, likely designed as cover for him)
  • March 30: Durham informs Sussmann they want to call an FBI expert, in part to explain DNS data, but in part to attack the credibility of the data and also want to use a motion in limine to breach privilege claims made by the Democrats
  • March 31: Andrew DeFilippis tells attorney for Rodney Joffe that Joffe remains under investigation
  • April 4: Competing motions in limine present two different versions of the conspiracy that happened in 2016
  • April 6: Second set of sanctions on Alfa Bank; Durham moves to compel privilege review

Since Alfa’s lawsuit was stayed, Durham has taken at least four untimely steps, apparently in an effort to turn a single sketchy false statement charge into the conspiracy Durham has not yet been able to substantiate, the conspiracy without which his single false statement claim is far weaker.

With all that in mind, consider the basis on which Durham argues he should be able to breach privilege claims, no matter how flimsy.

Durham admits that he only asked for redacted copies of those documents Fusion and the Democrats have claimed privilege over on September 16, the day Durham indicted Sussmann.

On September 16, 2021, the Government issued grand jury subpoenas to Law Firm1 and the U.S. Investigative Firm, requiring them to produce – in redacted form – the documents previously listed on privilege logs prepared by counsel for those entities so that such documents would be available for admission into evidence at any trial in this matter. Those entities subsequently produced the requested documents with redactions.

In other words, Durham didn’t even begin the process of trying to pierce this privilege claim until over 850 days into his investigation, and days before the statutes of limitation started to expire. And in the ensuing six months, Durham has done nothing. So he’s making this request less than six weeks before the start of the trial (as I noted, litigating the much more specious John Eastman privilege claims has been pending since January 20), claiming the information is necessary for his case.

But some of the arguments Durham makes rely on the belated filings he has submitted in the last month. For example, he invokes Christopher Steele, whose first appearance in this case was in that untimely 404(b) notice.

Perhaps most notably, the U.S. Investigative Firm retained a United Kingdom-based investigator (“U.K. Person-1”) who compiled information and reports that became a widely-known “dossier” containing allegations of purported coordination between Trump and the Russian government.

Durham intertwines discussion of the Alfa Bank allegations with those of the dossier, even though — as Sussmann noted,

the Special Counsel has not identified, nor could he, any evidence showing that Mr. Sussmann … had any awareness Mr. Steele was separately providing information to the FBI.

That is, Steele’s activities might matter to the Sussmann case if this were a charged conspiracy, but not only didn’t Durham charge it, he only asserted the theory of conspiratorial relationship that involves Steele by relying on his delayed 404(b) notice.

Durham’s bid to pierce privilege claims with Rodney Joffe and Marc Elias similarly tie to events in which Sussmann was not involved. False statements cases are, as Sussmann noted the other day, about the state of mind of the defendant, not about events that took place weeks after his alleged lie.

But even if this were a conspiracy, Durham reserves for himself the right to determine what is necessary for a law firm to determine how to respond when a campaign opponent invites crimes from a hostile nation-state while making false claims about his ties to that state, and what is, instead, just political dirt.

To the extent these entities continue to assert privilege over the cited documents, they cannot plausibly rely on the “intermediary” exception. To be sure, the record available to the Government does not reflect that employees of the U.S. Investigative Firm were necessary in any way to facilitate Law Firm-1’s provision of legal advice to HFA and DNC, much less to Tech Executive-1. As noted above, many of the actions taken by the U.S. Investigative Firm pursuant to its retention agreement fell outside the purpose outlined in Law Firm-1’s engagement letter – that is, to provide expertise related to Law Firm-1’s legal advice to the DNC and Clinton Campaign regarding defamation and libel. When U.S. Investigative Firm employees communicated with Tech Executive-1, they were doing so in furtherance of collaborating and promoting the Russian Bank1 allegations, not facilitating legal advice from [Law Firm-1] to Tech Executive-1. Simply put, these were communications related to political opposition research and were not made “in confidence for the purpose of obtaining legal advice from the lawyer.” In re Lindsey, 158 F.3d at 1280. Any confidentiality that Tech Executive-1 might have otherwise maintained over these communications was waived when he and the defendant chose to disclose such information to a third party that did not have any formal or informal contract or retention agreement with Tech Executive-1 (i.e., the U.S. Investigative Firm).

These claims, absent evidence of the sort Robert Mueller showed Beryl Howell to breach Paul Manafort’s privilege claims, would be controversial even if they were timely (and if they were timely, they should have been presented to Howell before charging Sussmann instead of presenting them to Cooper six weeks before the trial date).

But they’re not timely, and they rely on other claims that are not timely. And all those untimely claims came in the wake of altered circumstances created by Putin’s invasion of Ukraine.

This series of late game curveballs would be abusive in any case, even if they were caused by long-planned deliberate malice or even incompetence. But the way they coincide with the collapse of the symbiotic lawfare project probably ordered — as was Petr Aven’s post-election outreach to Trump — by Putin really makes this look like a mere continuation of a six year plan to use Russia’s assault on democracy in 2016 to continue to sow discord in the US.


Claims made in untimely March 23 404(b) notice:

In a supplement to his Federal Rule of Evidence 404(b) notice provided to the defense on March 23 (the “Supplemental Notice”), the Special Counsel argues that such data gathering “constitute[s] direct evidence of the charged offense” as “factual context for the defendant’s conduct” and “to prove the existence of the defendant’s attorney-client relationships with [Mr. Joffe] and the Clinton Campaign.” Suppl. Notice at 2.

[snip

In his Supplemental Notice, the Special Counsel suggests that data was gathered “in a manner that may be considered objectionable—whether through invasions of privacy, breaches of contract, or other [unspecified] unlawful or unethical means.” Suppl. Notice at 2. But the Supplemental Notice does not identify—nor could it—any evidence that Mr. Sussmann had any awareness of or involvement in the alleged “objectionable” conduct of others related to gathering data, to the extent there even was any such “objectionable” conduct.

[snip]

The Special Counsel has also provided notice of his intention to adduce evidence regarding the accuracy of both “the purported data and [the] allegations” that Mr. Sussmann provided to the FBI and Agency 2. See Suppl. Notice at 2 (emphasis added).

[snip]

Elsewhere, the Special Counsel has suggested that data provided to Agency-2 was “misstated, overstated, and/or cherry-picked facts,” Suppl. Notice at 2,

[snip]

The Special Counsel has asserted he will offer evidence regarding the “origin” of the technical data gathered by Mr. Joffe and Others as “direct evidence” of “factual context for the defendant’s conduct” and “the existence of the defendant’s attorney-client relationships with [Mr. Joffe] and the Clinton Campaign” as to both the data provided to the FBI in September 2016 and the data provided to Agency-2 in 2017.1 Suppl. Notice at 2.

[snip]

The Special Counsel has also indicated an intention to offer evidence that (1) the data Mr. Sussmann provided was inaccurate; and (2) the analysis and conclusions drawn from that data were inaccurate. Suppl. Notice at 2 (seeking to introduce evidence regarding the “strength and reliability” of the data and allegations provided to the FBI and Agency-2, including that the white papers “may have misstated, overstated, and/or cherry-picked facts” or that certain FBI or Agency2 personnel determined that “data was potentially incomplete, fabricated, and/or exaggerated”).

[snip]

Second, the Special Counsel has utterly failed to provide an explanation for how such evidence is admissible against Mr. Sussmann. Instead, the Special Counsel simply asserts that evidence regarding the strength and reliability of the information provided to the FBI and Agency 2 is “direct evidence” of the false statements charge against Mr. Sussmann. Suppl. Notice at 2.

 

Tunnel Vision: Durham Treats Citizens’ Research into Real Paul Manafort Crimes Like a Criminal Conspiracy

On Monday, both John Durham and Michael Sussmann submitted their motions in limine, which are filings to argue about what can be admitted at trial. They address a range of issues that I’ll cover in several posts:

Sussmann:

Durham wants to:

  • Admit witnesses’ contemporaneous notes of conversations with the FBI General Counsel
  • Admit emails referenced in the Indictment and other, similar emails (see this post)
  • Admit certain acts and statements (including the defendant’s February 2017 meeting with a government agency, his December 2017 Congressional testimony, and his former employer’s October 2018 statements to the media) as direct evidence or, alternatively, pursuant to Federal Rule of Evidence 404(b)
  • Exclude evidence and preclude argument concerning allegations of political bias on the part of the Special Counsel (addressed in this post)
  • Admit an October 31, 2016 tweet by the Clinton Campaign

I will link my discussions in serial fashion.


It’s a testament to how deep John Durham is in his conspiracy-driven rabbit hole that he assumes a 24-minute meeting between Marc Elias and Michael Sussmann on July 31, 2016 to discuss the “server issue” pertained to the Alfa Bank allegations. Just days earlier, after all, Donald Trump had asked Russia to hack Hillary Clinton, and within hours, Russian hackers obliged by targeting, for the first time, Hillary’s home office. Someone who worked in security for Hillary’s campaign told me that from his perspective, the Russian attacks on Hillary seemed like a series of increasing waves of attacks, and the response to Trump’s comments was one of those waves (this former staffer documented such waves of attack in real time). The Hillary campaign didn’t need Robert Mueller to tell them that Russia seemed to respond to Trump’s request by ratcheting up their attacks, and Russia’s response to Trump would have been an urgent issue for the lawyer in charge of their cybersecurity response.

It’s certainly possible this reference to the “server” issue pertained to the Alfa Bank allegations. But Durham probably doesn’t know; nor do I. None of the other billing references Durham suggests pertain to the Alfa Bank issue reference a server.

The possibility that Durham is seeing a conspiracy to attack Donald Trump in evidence that could, instead, be evidence of Hillary’s campaign response to an unprecedented nation-state attack, is a worthwhile demonstration of the way the two sides in this case have two entirely different theories of the conspiracy that occurred during that election. That’s particularly apparent given the competing motions in limine seeking both to prohibit and to include a bunch of communications from that period. These motions are not symmetrical. Sussmann moved to,

preclude three categories of evidence and/or arguments that the Special Counsel has suggested it might offer, namely, evidence and arguments concerning: (1) the gathering of DNS data by Mr. Sussmann’s former client Rodney Joffe, and/or other data scientists, and fellow business personnel of Mr. Joffe (collectively “Mr. Joffe and Others”); (2) the accuracy of this data and the accuracy of the conclusions and analysis based on this data; and (3) Christopher Steele and information he separately provided to the Federal Bureau of Investigation (“FBI”) (including the so-called “Steele Dossier”) (all three, collectively, the “Joffe and Steele Conduct”).

Sussmann is not moving to exclude mention his contact with Fusion GPS or reporters (though he is fighting to keep Christopher Steele out of his trial).

Whereas Durham is seeking to,

(ii) admit emails referenced in the Indictment and other, similar emails, (iii) admit certain acts and statements (including the defendant’s February 2017 meeting with a government agency, his December 2017 Congressional testimony, and his former employer’s October 2018 statements to the media) as direct evidence or, alternatively, pursuant to Federal Rule of Evidence 404(b),

[snip]

(v) admit an October 31, 2016 tweet by the Clinton Campaign.

Ultimately this is a fight about whether Sussmann’s alleged lie amounted to reporting a tip about a real cybersecurity anomaly, as Sussmann maintains, or, as Durham argues, seeding dirt as part of a dirty tricks campaign against Trump.

Predictably, in addition to emails involving Fusion GPS, Durham wants to introduce the emails between Rodney Joffe and researchers — emails to which Sussmann was not privy — as statements of co-conspirators.

In addition, Rule 801(d)(2)(E) authorizes the admission of an out-ofcourt statement “by a co-conspirator of a party during the course and in furtherance of the conspiracy.” Where a defendant objects to such an admission, however, the district court must find by a preponderance of the evidence that a conspiracy existed and that the defendant and declarant were members of that conspiracy. Bourjaily v. United States, 483 U.S. 171, 175-76 (1987). A court can preliminarily admit hearsay statements of co-conspirators, subject to connection through proof of conspiracy. See United States v. Jackson, 627 F. 2d 1198, 1218 (D.C. Cir. 1980) (approving procedure). To admit a statement under Rule 801(d)(2)(E), the court must find (i) that there was a conspiracy; (ii) that its members included the declarant and the party against whom the statement is offered; and (iii) that the statement was made during the course of and in furtherance of the conspiracy. Bourjaily 483 U.S. at 175.

Importantly, although Rule 801(d)(2)(E) refers to “conspiracy” and “co-conspirators,” the D.C. Circuit has expressly held that “the doctrine is not limited to unlawful combinations.” United States v. Weisz, 718 F. 2d 413, 433 (D.C. Cir. 1983). “Rather, the rule, based on concepts of agency and partnership law and applicable in both civil and criminal trials, ‘embodies the long-standing doctrine that when two or more individuals are acting in concert toward a common goal, the outof-court statements of one are . . . admissible against the others, if made in furtherance of the common goal.’” United States v. Gewin, 471 F. 3d 197, 201–02 (D.C. Cir. 2006) (citing Weisz, 718 F. 2d at 433)). In quoting and citing the 1974 Senate Advisory Committee note to Rule 801(d)(2)(E), the D.C. Circuit has also explained that “[Rule 801(d)(2)(E)] was meant to carry forward the universally accepted doctrine that a joint venturer is considered as a coconspirator for the purpose of this [R]ule even though no conspiracy has been charged.” Weisz, 718 F. 2d at 433 (citations and quotation marks omitted); United States v. Owens, 484 U.S. 554, 562 (1988) (invoking Advisory Committee note in interpreting Federal Rules of Evidence).

Durham describes that the object of that conspiracy was to deal dirt on Donald Trump to the US government and the media.

As an initial matter, the Government expects that the evidence at trial will show that beginning in late July/early August 2016, the defendant, Tech Executive-1, and agents of the Clinton Campaign were “acting in concert toward a common goal,” Gewin, 471 F. 3d at 201–02, namely, the goal of assembling and disseminating the Russian Bank-1 allegations and other derogatory information about Trump and his associates to the media and the U.S. government.

[snip]

More specifically, these emails show that the researchers and Tech Executive-1 were acting in concert with the defendant and others to gather and spread damaging information about a Presidential candidate shortly before the scheduled election.

And that, Durham claims, makes an attempt to understand a cybersecurity anomaly a political act.

In addition, the aforementioned communications demonstrate the materiality of the defendant’s lie insofar as they reveal the political origins and purposes for this work. And those political origins are especially probative here because they provided a motive for the defendant to conceal his clients’ involvement in these matters.

There is a great deal that is alarming and problematic with this schema. For starters, it suggests Sussmann’s response to Eric Lichtblau’s question asking, “I see Russians are hacking away. any big news?” (in what is clearly a follow-up of earlier conversations about the very real attack on Hillary by Russia) was part of a conspiracy and not a legitimate response to an obvious good faith and important question from a journalist.

Emails, billing records, and testimonial evidence to be offered at trial reflect that during approximately the same time period – and before approaching the FBI about these matters – the defendant provided the Russian Bank-1 allegations to a reporter from a major U.S. newspaper.

Many of the problems in Durham’s argument pertain to April Lorenzen, who started looking into this anomaly in June. But Durham — who also wants to make the source of these anomalies an issue at trial — seems to suggest this conspiracy started on some calls and one meeting between Marc Elias, Joffe, and Sussmann that started on August 12.

Testimony at trial will establish that among the individuals whom Tech Executive1 and Originator-1 enlisted in this project were researchers at University-1 who were assigned to a then-pending federal cybersecurity contract with a U.S. government agency (“Agency-1”). At the time, Tech Executive-1 was negotiating an agreement between his then-employer (“Internet Company-1”) and University-1 to sell large amounts of internet data to the university for use under the Agency-1 contract. The intended purpose of this agreement and University-1’s sensitive work with Agency-1 was to gather and analyze internet metadata in order to detect malicious cyberattacks. As set forth in the Indictment, however, Tech Executive-1 and Originator-1 worked with two of these University-1 researchers (“Researcher-1” and “Researcher-2”) to mine internet data for the purpose of assisting the aforementioned opposition research.

That is, Durham both includes Lorenzen’s earlier actions in his scope, but imagines that the conspiracy in question didn’t form until long after she identified the anomaly.

Similarly, Durham holds Sussmann accountable for the eventual articles written by Lichtblau and Franklin Foer, even though Lorenzen was far more involved in that process (and random people like “Phil” who were signing comments Guccifer 2.0 were also pushing the NYT to write a story). After the FBI killed the initial story, Durham has not shown any evidence that Sussmann was pushing the actual Alfa Bank story until after the Lichtblau and Foer stories were published.

Meanwhile, Durham’s interpretation of this Lorenzen email — written in the wake of Paul Manafort’s firing because his secret influence-peddling for Russian backed Ukrainian Oligarchs had become a campaign liability — is fairly shocking.

NOTE: The Russian money launderers, sometimes assisted by Americans like those you see listed in the PDF [Tech Executive-1] just shared [the Trump Associates List], and others you’ll see in [name redacted]’s next document …. Cyprus is one of the places they like. That’s where [Russian Bank-1]-Forex is organized. Choose .com or .ru when studying their domains … and remember we don’t need a russian IP, domain or company for money to flow from Russians to Trump.

[Russian Bank-1]-* has massive tentacles in so many countries including the USA. Regarding this whole project, my opinion is that from DNS all we could gain even in the best case is an *inference*.

I have not the slightest doubt that illegal money and relationships exist between pro-Russian and pro-Trump, meaning actual people very close to Trump if not himself. And by Putin’s traditional style, people Putin controls, but not himself. He controls the oligarchs and they control massive fortunes and cross nearly all major industries in a vast number of countries.

But even if we found what [Tech Executive-1] asks us to find in DNS we don’t see the money flow, and we don’t see the content of some message saying “send me the money here” etc.

I could fill out a sales form on two websites, faking the other company’s email address in each form, and cause them to appear to communicate with each other in DNS. (And other ways I can think of and I feel sure [Researcher-2] can think of.)

IF [Tech Executive-1] can take the *inference* we gain through this team exercise … and cause someone to apply more useful tools of more useful observation or study or questioning … then work to develop even an inference may be worthwhile.

That is how I understood the task. Because [Tech Executive-1] didn’t tell me more context or specific things. What [name redacted] has been digging up is going to wind up being significant. It’s just not the case that you can rest assured that Hil[l]ary’s opposition research and whatever professional govts and investigative journalists are also digging … they just don’t all come up with the same things or interpret them the same way. But if you find any benefit in what she has done or is doing, you need to say so, to encourage her. Because we are both killing ourselves here, every day for weeks.

I’m on the verge of something interesting with hosts that talk to the list of Trump dirty advisor domain resources, and hosts that talk to [Russian Bank1]-* domains. Take even my start on this and you have Tehran and a set of Russian banks they talk to. I absolutely do not assume that money is passing thru Tehran to Trump. It’s just one of many *inferences* I’m looking at.

SAME IRANIAN IP THAT TALKS TO SOME TRUMP ADVISORS, also talks to:

[list of domains redacted]

(Capitals don’t mean SUPER SIGNIFICANT it was just a heading.)

Many of the IPs we have to work with are quite MIXED in purpose, meaning that a lot of work is needed to WINNOW down and then you will still only be left in most cases with an *inference* not a certainty. Trump/ advisor domains I’ve been using. These include ALL from [Tech Executive-1’s] PDF [the Trump Associate’s List] plus more from [name redacted]’s work:

[list of domains redacted]

[RUSSIAN BANK-1] DOMAINS

[list of domains redacted]

More needs to be added to both lists. [Durham’s bold, my italics]

That’s true in part, because Durham suggests the entirety of this email is part of the conspiracy, but it’s clear that Lorenzen was working with another person, whose name Durham redacts, who seems arbitrarily excluded from it.

But it’s also true because Lorenzen sent it in the wake of Trump’s false claim — made in the same appearance where he asked Russia to hack Hillary some more — that he had no business ties to Russia, when in fact he continued to pursue a Trump Tower deal that would have relied on funding from one of two sanctioned banks. She sent it in the wake of Manafort’s false claims (and Rick Gates’ lies to the press) that served to hide his real ties to Russian-backed oligarchs, including one centrally involved in the Russian effort to tamper in the election, Oleg Deripaska, and his money laundering through Cyprus of payments from those Oligarchs. Manafort was helped in those lies — in the same weeks as Sussmann met with James Baker!!!! — by the son-in-law of Alfa Bank’s co-founder German Khan, Alex Van der Zwaan, who went on to lie about his actions to Mueller. In the same month Sussmann met with Baker, Mueller found probable cause to investigate, Trump got a $10 million infusion from an Egyptian state-owned bank. Lorenzen’s suspicions were not only realistic, but some turned out to be absolutely true.

Similarly, Durham makes much of this email from Lorenzen:

[Tech Executive-1’s] carefully designed actions provide the possibility of: 1. causing the adversaries to react. Stop using? Explain? 2. Getting more people with more resources to find out the things that are unknown, whether those be NON-internet channels of connection between Trump, [Healthcare Company1][owners of Healthcare Company-1], [Russian Bank-1] … money flows, deals, God knows it could be [owners of Healthcare Company-1’s] children married to Russians who run [Russian Bank1]. Or like Researcher-2 shared, someone’s wife vacationing with someone else’s wife.

I have no clue. These are things other people may look into, if they know a direction of interest to look. 3. Legal action to protect our country from people who act against our national interests. I don’t care in the least whether I’m right or wrong about VPN from [Russian Bank-1], [TOR] from Russian Bank-1, or just SMTP artifact pointing to a 3-way connection. [Tech Executive1] has carefully crafted a message that could work to accomplish the goals. Weakening that message in any way would in my opinion be a mistake. [Durham’s bold, my italics]

Here, again, Lorenzen wonders about suspect ties of those married to the children of Alfa Bank’s founders within days of Van der Zwaan taking actions to hide Manafort’s ties to Russian-backed oligarchs.

In other words, Durham treats Lorenzen’s inferences, some of which turned out not just to be right, but to be centrally important to the ongoing Russian attack on the US, as improper dirt on a presidential candidate and not stuff that every citizen of the United States would want to know. Durham is criminalizing a private citizen’s effort (one for which he shows no direct tie to the Clinton campaign) to understand real corruption of Trump and his campaign manager. Durham literally calls this effort to research a political candidate — a core responsibility in a democracy — a “venture to gather and disseminate purportedly derogatory internet data regarding a Presidential candidate.”

This is not the only email that pointed to real criminal evidence pertaining to Russia’s attack in 2016. He cites David Dagon justifying using this data by pointing to the FBI’s investigation into Fancy Bear — the hackers who were in that same month still hacking Hillary and trying to hack election infrastructure.

I believe this is at a threshold of probable cause for violation of Commerce Dept sanctions, FEC elections rules, and has releva[n]cy for the Bureau’s Fancy Bear inquiry, etc._ I also have some graphs/animations of the Trump [] router, which I can clean up and contribute. (They merely give a glimpse of aggregate volume, since we lack actual flows.) I’d need until the weekend.”

Again, Paul Manafort did turn out to have real ties to the APT 28 operation, Roger Stone appears to have been in direct contact with the GRU-backed persona since before it went public, and Mueller did charge an Oligarch with close ties to Putin, Yevgeniy Prigozhin, with violating FEC election rules. To suggest that it was improper to try to investigate these ongoing crimes in real time — to suggest the investigation is itself a conspiracy — undermines any possibility for a vibrant democracy.

And Durham decided belatedly (Sussmann’s filing makes it clear Durham laid all this out in a March 23 404(b) notice, 5 days past his due date) to argue that all these emails are admissible so he can argue that Joffe asked Sussmann to hide his role in all this so he could hide the emails that show real investigation into real, ongoing crimes.

Indeed, many of the emails’ contents are relevant and not hearsay for the additional reason that they shed important light on the defendant’s and Tech Executive-1’s “intent, motive, or state of mind,” and “help to explain their future conduct.” Safavian, 435 F. Supp. at 45–46. In particular, the mere fact that these emails (i) existed in written form prior to the defendant’s September 19, 2016 meeting with the FBI and (ii) reflected instances of serious doubts about whether the Russian Bank-1 data might have been “spoofed,” a “red herring,” “wrong,” or a product of “tunnel vision” or bias against Trump, provided Tech Executive-1 and the defendant with motive to conceal the origins and provenance of the Russian Bank-1 allegations from the FBI. In particular, a reasonable jury could infer from these and other facts that Tech Executive-1 made the defendant aware of these prior doubts and therefore supplied the defendant – as Tech Executive-1’s representative – with a motive to conceal their client relationship from the FBI General Counsel. A jury could similarly infer that even if Tech Executive-1 did not make the defendant aware of these communications, he nevertheless instructed the defendant to deny the existence of such a client relationship for the same reason (i.e., to avoid the FBI’s potential discovery of the doubts reflected in these prior discussions).

Durham’s conspiracy theorizing is not just a dangerous attack on citizenship. It is also cherry picking. He has left out a number of the people who were pursuing the DNS question, including those — Matt Blaze and others — whom Sussmann said he had consulted with in his meeting with Baker, but put in people that Sussmann did not even know.

Sussmann notes he wasn’t involved in any of this data-gathering, nor was the Clinton campaign.

There cannot be any credible argument that the data-gathering sheds light on Mr. Sussmann’s representation of Mr. Joffe, because there is no evidence that Mr. Sussmann was involved in the data-gathering or that it was being done to give to Mr. Sussmann, as Mr. Joffe’s counsel. It is just as specious to suggest that the data-gathering bears on Mr. Sussmann’s attorney-client relationship with the Clinton Campaign. There is no evidence that the Clinton Campaign directed or was involved in the gathering of data, via Mr. Sussmann or otherwise. Nor is there any evidence of communications on issues pertinent to the Indictment between Mr. Joffe and the Clinton Campaign. As such, the manner in which data was gathered has no bearing on Mr. Sussmann’s attorney-client relationship with the Clinton Campaign.

In what is likely to be a persuasive argument to Judge Cooper, Sussmann argued that the only thing that can be relevant to the charge against him — a false statements charge, not conspiracy to defraud the US — is his state of mind.

Evidence that lacks a connection to the charge or the defendant’s scope of knowledge, including as to the defendant’s state of mind, is decidedly not relevant. See, e.g., United States v. Wade, 512 F. App’x 11, 14 (2d Cir. 2013) (excluding testimony about another act because it “was not temporally or physically linked” to the crime at issue and the “testimony presented a risk of juror confusion and extended litigation of a collateral matter”); United States v. Libby, 467 F. Supp. 2d 1, 15-16 (D.D.C. 2006) (rejecting attempts to “elicit . . . what others were told” as “simply irrelevant to the defendant’s state of mind” in a false statements and perjury case); United States v. George, 786 F. Supp. 56, 64 (D.D.C. 1992) (without the “crucial link” that “defendant knew what information others had,” that information is not material to the defendant’s state of mind in an obstruction and false statements case); United States v. Secord, 726 F. Supp. 845, 848-49 (D.D.C. 1989) (information of which the defendant had no knowledge is necessarily immaterial to the defendant’s state of mind, intent, or motive in a false statements case).

[snip]

First, evidence regarding the accuracy of the data or the conclusions drawn from that data is simply irrelevant to the false statement charge against Mr. Sussmann. Mr. Sussmann is not charged with defrauding the government or with a conspiracy to do that or anything else. There is no allegation or evidence that Mr. Sussmann was privy to any of the communications between Mr. Joffe and Others about the data or its analyses that the Special Counsel misleadingly cites in the Indictment.

I think Durham’s bid to include communications with those (Lorenzen and Manos Antonakakis) Sussmann did not have direct contact with is likely to fail. So most of Durham’s conspiracy theorizing will likely remain on the pages of these filings.

But along the way, Durham’s tunnel vision about 2016 led him to forget to exclude the things that do go to Sussmann’s state of mind, such as the very real Russian attack on Hillary Clinton and Donald Trump’s public call for more such attacks.

So while Durham may be excluded from claiming that a private citizen’s attempt to learn about real crimes by a Presidential candidate before he is elected amounts to a criminal conspiracy, it is too late for Durham now to try to exclude evidence about Sussmann’s understanding of Donald Trump’s very real role in a hack of his client.

DOJ Treated Jerome Corsi as News Media but Not Roger Stone or Randy Credico (or Julian Assange)

Yesterday, DOJ released both an updated list of times when its media guidelines came into play (here are the 2016, 2017, and 2018 reports), as well as a summary of DOJ’s attempts to get records related to CNN, NYT, and WaPo reporting.

The former has raised some questions about how Mueller’s investigation applied these rules (as a reminder, my interview with the FBI was not with Mueller, though based on a month-long approval process I know to have occurred, I believe there is an entry in the 2017 report that pertains to me).

They’re easier to understand if you work through the second one, for legal process in 2019, first.

In the prosecution of an individual charged with obstructing the investigation into Russian interference in the 2016 presidential election, a United States Attorney authorized the issuance of a subpoena to a member of the news media for testimony. The member of the news media expressly agreed to testify pursuant to the subpoena. Because the member of the news media expressly agreed to testify, Attorney General authorization was not required. See 28 C.F.R. § 50.10(c)(3)(i)(A). The prosecution team did not call the member of the news media at trial.

There was just one trial of anyone for obstructing the investigation into Russian interference in 2016. George Papadopoulos, Mike Flynn, Michael Cohen, and Richard Pinedo never went to trial (nor did Alex Van der Zwaan, though his obstruction covered earlier events). Paul Manafort did go to trial for his tax cheating, but not for interfering with the Russian investigation (his plea breach hearing, which did pertain to lies he told to cover up his role in the Russian interference, was not a trial).

That means this has to be a reference to Roger Stone’s trial.

Two witnesses are known to have been subpoenaed, but not called to testify: Andrew Miller and Jerome Corsi. Randy Credico, a radio personality, testified at great length, including about how he booked Julian Assange and Roger Stone to appear on his radio show.

That’s not enough to prove that the reference is to Corsi (in part because there could have been other witnesses who were subpoenaed but not called to testify that we don’t know about). But now consider the second reference to the Mueller investigation, for something that happened in 2018.

In connection with an investigation into an alleged conspiracy involving persons or entities associated with a foreign government hacking the computers of a United States political party’s central organization, the Deputy Attorney General, acting as Attorney General, authorized the issuance of a grand jury subpoena duces tecum for the production of toll records from a cellular service provider for a telephone used by a member of the news media suspected of participating the conspiracy, as well as an application for a search warrant to search the member of the news media’s internet cloud and email accounts. Following the initial authorization, the Deputy Attorney General, acting as Attorney General, later authorized a voluntary interview of, and the issuance of a testimonial grand jury subpoena to, the member of the news media. All of this information was necessary to further the investigation of whether the member of the news media was involved in the conspiracy to unlawfully obtain and utilize the information from the hacked political party or other victims.

This is a description of someone investigated as a suspect.

While Mueller reviewed whether Don Jr violated the CFAA for accessing a non-public website he got sent a password to, the investigation into whether someone was part of the hack-and-leak conspiracy focused on Roger Stone (and Julian Assange, who does not obviously show up anywhere in this report, even though Mueller obtained a warrant targeting him as well). Two people were known to have been investigated as fellow suspects of Stone: Corsi and Ted Malloch. Mueller’s team obtained warrants and subpoenas targeting both. In Malloch’s case, however, the government is only known to have obtained his phone and his Gmail.

In Corsi’s case, however, Mueller targeted his Apple accounts, as well as email accounts held at CSC Holdings, and Windstream.

Mueller is not, however, known to have obtained a warrant targeting Credico.

If the government treated Corsi as a member of the news media in 2018, when they obtained warrants targeting him as a suspected co-conspirator of Roger Stone, then they likely treated him as a member of the news media in 2019, when they subpoenaed him — but did not call him — as a witness in Stone’s trial. That is, the available evidence strongly suggests that Corsi is the person described in both Mueller entries.

Which, in turn, suggests that DOJ treated Corsi — but not Stone or Credico — as members of the news media.

For what it’s worth, I’m virtually certain that there’s still a Mueller entry missing, pertaining to a member of the news media who asked for a subpoena before he would share materials relating to his work. That person has never been publicly referenced in Mueller-related investigative materials since released, but I believe 302s from the investigation reflect FBI having obtained the materials they were asking for from that member of the news media. But that incident would have fit under 28 CFR 50.10(c)(3)(i)(A), when a member of the news media agrees to provide information so long as he gets a subpoena, which under the media guidelines does not require Attorney General approval.

Update: There’s an important point that has been forgotten by these debates but which is implied in Merrick Garland’s statements about the media policy. There are other means to obtain records on people playing a journalistic function: under FISA, by providing probable cause that they are an agent of a foreign power.

The Three Types (Thus Far) of Trump Mueller Pardons

To date, Trump has pardoned five people who were prosecuted by Mueller. I’m seeing a good deal of misunderstanding about what those pardons mean for any legal proceedings going forward, so I’d like to address some of that.

First, a lot of people say that accepting a pardon is tantamount to accepting guilt, under Burdick v.United States. It’s not. It’s narrower, though importantly goes to questions about whether a witness who has been pardoned has to testify or not. It also says that someone who has been pardoned must inform the court of the fact for it to be valid in any legal proceeding before the court.

That said, claims that Trump flunkies who’ve been pardoned have to testify are also too broad. If the people have any remaining legal exposure (as I’ll explain, Roger Stone and Paul Manafort do), they can still invoke the Fifth. That’s also true if they have state exposure for something like fraud or tax evasion. But in cases where the pardoned crime is only federal, such as Papadopoulos’ lies, it would be easy for prosecutors to immunize him in case he invoked his Fifth Amendment privileges, effectively forcing him to testify on penalty of contempt.

Thus far, Trump has issued three kinds of pardons for people prosecuted by Mueller:

  • Pardons for people with no further known (Mueller) legal exposure
  • Pardons for people with potentially grave further legal exposure
  • Fruit of the poison tree pardon for anything Mueller touched

Alex Van der Zwaan and George Papadopoulos:

Both Van Der Zwaan and Papadopoulos were pardoned for the single False Statements charge against them. Neither is known to have committed another crime. In Papadopoulos’ case, however, things could get dicey on several points. Trump forgave his $9,500 fine, which was the amount Papadopoulos accepted from suspected Israeli spooks. If he asks for that back that may raise questions about his exposure on FARA grounds. In addition, Papadopoulos has already testified before Congress that he called Marc Kasowitz after he was first interviewed by the FBI. If there were a larger prosecution about Trump’s obstruction, he might have been able to plead the Fifth for making that call — except he has already testified to it.

Papadopoulos withheld documents from Congress. With a DOJ that can enforce subpoenas, he might be asked to share those documents, which may require him to testify contrary to his 2018 OGR/HJC testimony.

If DOJ decided to reopen the investigation into a suspected Egyptian bribe to Trump because serving a subpoena on Trump Organization would now be less controversial than it was last summer, then Papadopoulos might be a key witness in that investigation, though since that’s unrelated to his charged false statements, he could still invoke the Fifth if questioned about it.

Roger Stone and Paul Manafort:

Like Van der Zwaan and Papadopoulos, Stone and Manafort were just pardoned for the crimes that they were found or pled guilty to, the money laundering, tax evasion, and FARA crimes in Manafort’s case, and the cover-up crimes in Stone’s case. For both, however, that’s not the full extent of what they were investigated or might be witnesses for.

Before I get there, let me note that multiple sources are claiming that, because Trump included Manafort’s criminal forfeiture in the language of his pardon, he’ll get his ill-gotten gains back. I’m not an expert on this, but I do know that Manafort also civilly forfeited these goods in his plea agreement.

So to attempt to reverse this forfeiture, Manafort would have to spend a great deal of money litigating it, and it’s not at all clear it’d work.

Manafort was also referred for suspected FECA violations involving two PACs that, prosecutors suspected, he got paid through via a kickback system. These cases must be closed, because they were unsealed in the Mueller Report back in September. But Manafort may face more scrutiny on them if DOJ investigates Trump’s other corrupt PACs.

Unless he, too, is pardoned, Konstantin Kilimnik remains under investigation. That’s an area where things might get more interesting for Manafort, because during the period when he was purportedly cooperating, he lied about the fact that he had conspired with Kilimnik. In any case, until the Kilimnik and Oleg Deripaska investigations are closed, Manafort has some exposure.

Things are more complicated still for Stone. There were at least two investigations into Stone — probably on conspiracy and foreign agent crimes — still active in April. If the redactions if Mueller 302s are any indication, Barr shut parts of that investigation down since, which will be of interest on its own right (Congress learned of these ongoing investigations when they got unsealed portions of the Mueller Report that have only recently been made public, and I know there is some interest in learning what those investigations were or are, and that was true even before any discussions about Trump’s abuse of pardons).

In any case, the investigation into a pardon for Julian Assange was active at least as recently as October. Stone has already called on Trump to pardon Assange since his own pardon, potentially a new overt act in a conspiracy. And Trump might well pardon Assange; even pardoning him for the crimes currently charged would be a new overt act in that conspiracy, which would implicate Stone. So even if Barr shut that investigation down, there is already reason to reopen it.

So while Barr may have tried to clean up the remaining criminal exposure against Stone, it’s not clear he could succeed at doing so, much less without creating problems for others going forward.

Mike Flynn:

As I have written, Mike Flynn’s pardon was constructed in a way that attempted to eliminate all criminal exposure that might arise from anything associated with the Mueller investigation for him. In addition to pardoning Flynn for the false statements charge he pled guilty to, it pardons him for lying about being an Agent of Turkey, for being an Agent of Turkey, and for lying to Judge Sullivan.

But it also attempts to pardon Flynn for any crime that might arise out of facts known to Mueller. While, generally, I think the pardon power is very broad, this effectively tried to pardon Flynn for an investigation, not for crimes. Plus, the broadness of the pardon may backfire, insofar as it would strip Flynn of the ability to plead the Fifth more broadly. Even just a retrial of Bijan Kian (unless Trump pardons him and Mike Jr) might force Flynn to commit new crimes, because both telling the truth and lying about his secret relationship with Turkey would be a new crime.

Given his seditious behavior, Flynn might have entirely new criminal exposure by the time Joe Biden is sworn in any case. But the attempt to be expansive with Flynn’s pardon might backfire for him.

Of the five Mueller criminals pardoned so far, only Van der Zwaan is clearly free of danger going forward.

And these five don’t even cover some of the most complex pardon recipients. Any Assange pardon may be the most obviously illegal for Trump (save a self-pardon), because it would involve a quid pro quo entered before he was elected. With Steve Bannon, Trump will need to pardon for another crime, fraud associated with Build the Wall, but if it covers Mueller, it may make it easier for Bannon to repeat what truths he already told to the grand jury. With Rudy Giuliani, Trump will need to pardon for unidentified crimes currently under investigation, but also Rudy’s efforts to broker pardons, which may make the pardon itself more dicey. With Trump’s children (including Jared Kushner), I assume he’ll offer a Nixon type pardon for all crimes committed before the day of pardon. But there may be ways to make them admit to these crimes.

Billy Barr is the best cover-up artist in the history of DOJ. But Trump is attempting to pardon himself out of a dicier situation than Poppy Bush was in Iran-Contra. Plus, even assuming Mueller’s team left everything available for Barr’s discovery, Barr may be hamstrung by the fact that he doesn’t believe in most of the crimes Trump committed, something that could become especially problematic as the full extent of Trump’s dalliance with Russia becomes known going forward. Barr didn’t support some of these pardons, like a hypothetical Assange one. And now, in his absence, Trump has grown increasingly paranoid about Pat Cipollone, who will have to shepherd the rest.

The pardon power is awesome and fairly unlimited. But it’s not yet clear the Mueller pardons will do what Trump hopes they will. With virtually all of them, there are loose strings that, if they get pulled, may undo the immunity Trump has tried to offer.

20 Months: A Comparison of the Mueller and Durham Investigations

Because Jonathan Turley and John Cornyn are being stupid on the Internet, I did a Twitter thread comparing the relative output of the Mueller and Durham investigations in their first 18 months. Actually, Durham has been investigating the Russian investigation for 20 months already.

So I did a comparison of the Mueller and Durham investigations over their first 20 months. Here’s what that comparison looks like.

So, in 20 months, Durham went on a boondoggle trip to Italy with Bill Barr to chase conspiracy theories, charged one person, and had his top investigator quit due to political pressure.

In the Mueller investigation’s first 20 months, his prosecutors had charged 33 people and 3 corporations (just Roger Stone was charged after that) and, with Manafort’s forfeiture, paid for much of their investigation.

Update: I’ve corrected the Manafort forfeiture claim. While I haven’t checked precisely how much the US Treasury pocketed by selling Manafort’s properties, I think the declining value of Trump Tower condos means that Manafort’s forfeiture didn’t quite pay for the entire investigation. I’ve also corrected in which month Manafort was found guilty in EDVA.

Update: In response to the Durham appointment, American Oversight reposted the travel records from the Italy boondoggle, which was actually in September, not October (Barr also made a trip to Italy in August 2019 for the same stated purpose, so I wonder if there were two boondoggles). I’ve corrected the timeline accordingly.

Paul Manafort’s Ongoing Conspiracy with Suspected Russian Agent Konstantin Kilimnik

Update: The NYT had it correct the first time. They got — badly — played.

Because the NYT corrected an error (noting that Paul Manafort instructed Konstantin Kilimnik to pass on Trump polling data to pro-Russian Ukrainian oligarchs Serhiy Lyovochkin and Rinat Akhmetov, not Russian oligarch Oleg Deripaska), the usual suspects are claiming that the really damning disclosures revealed by Paul Manafort’s filing of the other day don’t yet prove Trump’s campaign manager conspired with Russia.

Manafort already pled guilty to conspiring with Russian Konstantin Kilimnik

I saw claims as recently as the other day that no Trump associate has been charged or pled guilty to conspiring with a Russian. That’s false.

As part of his plea agreement in September, Manafort pled guilty to conspiring with Kilimnik, a Russian citizen, to witness tamper.  Admittedly, this particular conspiracy took place in 2018, not 2016, and it served not to tamper with the 2016 election, but to hide the ways in which Manafort kept secret that he was an agent of Ukraine spending millions to influence US policy. But, as Mueller has described it, Manafort committed a series of crimes designed to hide his ongoing ties to Russian-backed Ukrainian oligarchs after being fired from the Trump campaign in significant part to sustain lies he and Rick Gates told while still working for Donald Trump.

In other words, one purpose of his conspiracy with Kilimnik was to hide the fact that Trump’s campaign manager — who, in spite of being broke, worked for “free” throughout the campaign — had been a paid agent of Ukraine.

The Russian Manafort conspired with, Konstantin Kilimnik is suspected of ties to the same agency that hacked the DNC

Past Mueller filings have made it clear that Kilimnik is suspected to have ties to a Russian intelligence agency. The FBI thinks so.

Federal Bureau of Investigation Special Agents assisting the Special Counsel’s Office assess that [Kilimnik] has ties to a Russian intelligence service and had such ties in 2016

And Rick Gates knew of those ties.

During his first interview with the Special Counsel’s Office, [Alex] van der Zwaan admitted that he knew of that connection, stating that Gates told him [Kilimnik] was a former Russian Intelligence Officer with the GRU.

The GRU, of course, is the Russian intelligence agency that hacked the Democrats in 2016. So Manafort has pled to conspiring not just with any Russian, but a Russian believed to have ties with the agency that hacked the DNC.

Akhmetov was named — in the same interview as Deripaska — in the affidavit for a 2017 probable cause search warrant targeting Manafort

Akhmetov, one of the oligarchs with whom NYT’s correction say Manafort did share data, was described in the probable cause warrant the FBI used to raid Manafort’s condo in July 2017. Indeed, Manafort described working for both Akhmetov and Deripaska in the same period he was supporting Viktor Yanukoych.

This suggests it’s difficult to separate Manafort’s historical criminal behavior involving Akhmetov from that involving Deripaska. And Kilimnik was involved in both.

Akhmetov and Lyovochkin were paying Manafort while he was working for Trump for “free”

As part of Manafort’s spox’s “clarifications” about the disclosures made clear in the redacted filing, he admitted that a $2.4 million payment Manafort anticipated — in an August 2016 email to his accountant — that he would receive in November was from Akhmetov and Lyovochkin. While that payment is understood to be debts owed for past work, his decision to share campaign data with the oligarchs seems to have been tied to ensuring he did get that payment.

If that’s right, it suggests that that $2.4 million payment, at a time when Manafort was broke but nevertheless working for “free,” had some tie to his work on the campaign.

Lyovochkin made an illegal donation to Donald Trump’s inauguration fund

Another Kilimnik business partner, Sam Patten, pled guilty (in part) to laundering a $50,000 donation to Trump’s inauguration fund for tickets to his inauguration.

To circumvent the foreign donation restriction, PATTEN, with the knowledge of Foreigner A, solicited a United States citizen to act as a “straw” purchaser so that he could conceal from the [Presidential Inauguration Committee] that the tickets for the inauguration were being paid for from a foreign source. The straw purchaser paid $50,000 for four inauguration tickets. The straw purchaser paid that sum one day after receiving from [Begemot Ventures] a check signed by PATTEN in the sum of $50,000. In turn, [Lyovochkin] had paid [Begemot] for the tickets though a Cypriot account. [Kilimnik and Lyovochkin] another Ukrainian, and PATTEN were allocated the four inauguration tickets. Thereafter, PATTEN attended a PIC event in Washington, D.C. with [Lyovochkin].

Thus, in addition to paying Trump’s campaign manager during the campaign, Lyovochkin made an illegal donation to Trump’s inauguration (and remember, there are outstanding questions about where all the inauguration funds went).

Manafort discussed Ukraine every time he spoke with Kilimnik during the campaign; those discussions included a Russian-friendly “peace plan”

Among the other lies Manafort told when he was supposed to be cooperating with Mueller pertained to his repeated conversations with Kilimnik. And while Manafort tried to minimize the persistence with which they discussed such things, suggesting he may have discussed a Ukraine peace plan more than once.

After being shown documents, Mr. Manafort “conceded” that he discussed or may have discussed a Ukraine peace plan with Mr. Kilimnik on more than one occasion

But Mueller maintains they have detailed descriptions showing the peace plan came up “at each” meeting they had, which suggests it was a key part of why the Russians and Ukrainians in touch with Manafort through Kilimnik were in touch with him.

And, again, both these lies and Manafort’s lies in 2018 and Manafort’s lies in 2016 and 2017 were all intended to hide these ongoing relationships, in significant part to hide Trump’s campaign ties to all of this.

As I disclosed last July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

The Significance of the James Wolfe Sentence for Mike Flynn, Leak Investigations, and the Signal Application

Yesterday, Judge Ketanji Brown Jackson sentenced former SSCI head of security James Wolfe to two months in prison for lying to the FBI. In her comments announcing the sentence, Jackson explained why she was giving Wolfe a stiffer sentence than what George Papadopoulos and Alex van der Zwaan received: because Wolfe had abused a position of authority.

“This court routinely sentences people who come from nothing, who have nothing, and whose life circumstances are such that they really don’t have a realistic shot of doing anything other than committing crimes,” Jackson said. “The unfortunate life circumstances of those defendants don’t result in a lower penalty, so why should someone who had every chance of doing the right thing, a person who society rightly expects to live up to high moral and ethical standards and who has no excuse for breaking the law, be treated any better in this regard.”

[snip]

Wolfe’s case was not part of special counsel Robert Mueller’s investigation, but the judge compared his situation to two defendants in the Mueller probe who also pleaded guilty to making false statements — former Trump campaign adviser George Papadopoulos, who spent 12 days in prison, and Dutch lawyer Alex van der Zwaan, who was sentenced to 30 days. Jackson concluded that Wolfe’s position as head of security for the Intelligence Committee was an “aggravating” factor.

The public shame he had endured, and the loss of his job and reputation, were not punishment enough, the judge said, but were rather the “natural consequence of having chosen to break the law.”

“You made blatant false statements directly to FBI agents who questioned you about matters of significance in the context of an ongoing investigation. And if anything, the fact that you were a government official tasked with responsibility for protecting government secrets yourself seems to make you more culpable than van der Zwaan and Papadopoulos, who held no such positions,” Jackson said.

While the resolution of this case is itself notable, it has likely significance in three other areas: for Mike Flynn, for DOJ’s leak investigations, and for encrypted messaging apps.

Emmet Sullivan will cite this sentence as precedent

It’s still far from clear that Emmet Sullivan will be sentencing Mike Flynn three months from now. Given Trump’s increasingly unstable mood, Flynn might get pardoned. Or, Flynn might try to judge shop, citing Sullivan’s invocation of treason Tuesday.

But if Sullivan does eventually sentence Flynn and if he still feels inclined to impose some prison time to punish Flynn for selling out his country, he can cite both this sentence and the language Jackson used in imposing it. Like Wolfe, Flynn occupied a (arguably, the) position of great responsibility for protecting our national security. Sullivan seems to agree with Jackson that, like Wolfe, Flynn should face more consequences for abusing the public trust. So Wolfe’s sentence might start a countertrend to the David Petraeus treatment, whereby the powerful dodge all responsibility.

(Note, this is a view that Zoe Tillman also expressed yesterday.)

DOJ may rethink its approach to using false statements to avoid the difficulties of leak cases

I have zero doubt that DOJ prosecuted Wolfe because they believe he is Ellen Nakashima’s source for the story revealing that Carter Page had been targeted with a FISA order, which is how they came to focus on him in the first place. But instead of charging him with that, they charged him for lying about his contacts with Nakashima, Ali Watkins, and two other journalists (and, in their reply to his sentencing memo, made it clear he had leaked information to two other young female national security reporters). In the sentencing phase, however, the government asked for a significant upward departure, a two year sentence that would be equivalent to what he’d face if they actually had proven him to be Nakashima’s source.

While the government provided circumstantial evidence he was Nakashima’s source — in part, her communications to him in the aftermath of the story — he convincingly rebutted one aspect of that claim (a suggestion that she changed her email footer to make her PGP key available to him). More importantly, he rightly called out what they were doing, trying to insinuate he had leaked the FISA information without presenting evidence.

The government itself admitted no fewer than four times in its opening submission that it found no evidence that Mr. Wolfe disclosed Classified Information to anyone. See infra Part I.A. Nonetheless, the government deploys the word “Classified” 58 times in a sentencing memorandum about a case in which there is no evidence of disclosure of Classified Information—let alone a charge.

[snip]

The government grudgingly admits that it lacks evidence that Mr. Wolfe disclosed Classified Information to anyone. See, e.g., Gov. Mem. at 1 (“although the defendant is not alleged to have disclosed classified information”); id. at 6 (“notwithstanding the fact that the FBI did not uncover evidence that the defendant himself disclosed classified national security information”); id. at 22 (“[w]hile the investigation has not uncovered evidence that Wolfe disclosed classified information”); id. at 25 n.14 (“while Wolfe denied that he ever disclosed classified information to REPORTER #2, and the government has no evidence that he did”).

The Court should see through the government’s repetition of the word “Classified” in the hope that the Court will be confused about the nature of the actual evidence and charges in this case and sentence Mr. Wolfe as if he had compromised such information.1

1 Similarly, the government devotes multiple pages of its memorandum describing the classified document that Mr. Wolfe is not accused of having disclosed. And although the government has walked back its initial assertion that Mr. Wolfe “received, maintained, and managed the Classified Document” (Indictment ¶ 18) to acknowledge that he was merely “involved in coordinating logistics for the FISA materials to be transported to the SSCI” (Gov. Mem. at 10), what the government still resists conceding is the fact that Mr. Wolfe had no access to read that document, let alone disclose any part of it. Beyond providing an explanation of how the FBI’s investigation arose, that document has absolutely no relevance to Mr. Wolfe’s sentencing, but it and its subject, an individual under investigation for dealings with Russia potentially related to the Trump campaign, likely have everything to do with the vigor of the government’s position.

It’s unclear, at this point, whether the government had evidence against Wolfe but chose not to use it because it would have required imposing on Nakashima’s equities (notably, they appear to be treating Nakashima with more respect than Ali Watkins, though it may be that they only chose to parallel construct Ali Watkins’ comms) and introduce classified evidence at trial. It may be that Wolfe genuinely isn’t the culprit.

Or it may be that Wolfe’s operational security was just good enough to avoid leaving evidence.

Whatever it is, particularly in a culture of increasing aggressiveness on leaks, the failure to get Wolfe here may lead DOJ to intensify its other efforts to pursue leakers using the Espionage Act.

DOJ might blame Signal and other encrypted messaging apps for their failure to find the Carter Page FISA culprit

And if DOJ believes they couldn’t prove a real case against Wolfe because of his operational security, they may use it to go after Signal and other encrypted messaging apps.

That’s because Wolfe managed to hide a great deal of his communications with journalists until they had sufficient evidence for a Rule 41 warrant to search his phone (which may well mean they hacked his phone). Here’s what it took to get Wolfe’s Signal texts.

Once the government discovered that Wolfe was dating Watkins, they needed to find a way to investigate him without letting him know he was a target, which made keeping classified information particularly difficult. An initial step involved meeting with him to talk about the leak investigation — purportedly of others — which they used as an opportunity to image his phone.

The FBI obtained court authority to conduct a delayed-notice search warrant pursuant to 18 U.S.C. § 3103a(b), which allowed the FBI to image Wolfe’s smartphone in October 2017. This was conducted while Wolfe was in a meeting with the FBI in his role as SSCI Director of Security, ostensibly to discuss the FBI’s leak investigation of the classified FISA material that had been shared with the SSCI. That search uncovered additional evidence of Wolfe’s communications with REPORTER #2, but it did not yet reveal his encrypted communications with other reporters.

Imaging the phone was not sufficient to discover his Signal texts.

Last December and this January, the FBI had two more interviews with Wolfe where they explicitly asked him questions about the investigation. At the first one, even after he admitted his relationship with Watkins, Wolfe lied about the conversations he continued to have on Signal.

The government was able to recover and view a limited number of these encrypted conversations only by executing a Rule 41 search warrant on the defendant’s personal smartphone after his January 11, 2018 interview with the FBI. It is noteworthy that Signal advertises on its website that its private messaging application allows users to send messages that “are always end-to-end encrypted and painstakingly engineered to keep your communication safe. We [Signal] can’t read your messages or see your calls, and no one else can either.” See Signal Website, located at https://signal.org. The government did not recover or otherwise obtain from any reporters’ communications devices or related records the content of any of these communications.

Then, in a follow-up meeting, he continued to lie, after which they seized his phone and found “fragments” of his Signal conversations.

It is noteworthy that Wolfe continued to lie to the FBI about his contacts with reporters, even after he was stripped of his security clearances and removed from his SSCI job – when he no longer had the motive he claimed for having lied about those contacts on December 15. During a follow-up voluntary interview at his home on January 11, 2018, Wolfe signed a written statement falsely answering “no” to the question whether he provided REPORTER #2 “or any unauthorized person, in whole or in part, by way of summary, or verbal [or] non-verbal confirmation, the contents of any information controlled or possessed by SSCI.” On that same day, the FBI executed a second search warrant pursuant to which it physically seized Wolfe’s personal telephone. It was during this search, and after Wolfe had spoken with the FBI on three separate occasions about the investigation into the leak of classified information concerning the FISA application, that the FBI recovered fragments of his encrypted Signal communications with REPORTERS #3 and #4.

They specify that this second warrant was a Rule 41 warrant, which would mean it’s possible — though by no means definite — that they hacked the phone.

The government was able to recover and view a limited number of these encrypted conversations only by executing a Rule 41 search warrant on the defendant’s personal smartphone after his January 11, 2018 interview with the FBI. It is noteworthy that Signal advertises on its website that its private messaging application allows users to send messages that “are always end-to-end encrypted and painstakingly engineered to keep your communication safe. We [Signal] can’t read your messages or see your calls, and no one else can either.” See Signal Website, located at https://signal.org.

Mind you, this still doesn’t tell us much (surely by design). In another mention, they note Signal’s auto-delete functionality.

Given the nature of Signal communications, which can be set to delete automatically, and which are difficult to recover once deleted, it is impossible to tell the extent of Wolfe’s communications with these two reporters. The FBI recovered 626 Signal communications between Wolfe and REPORTER #3, and 106 Signal communications between Wolfe and REPORTER #4.

Yet it remains unclear (though probably likely) that the “recovered” texts were Signal (indeed, given that he was lying and the only executed the Rule 41 warrant after he had been interviewed a second time, he presumably would have deleted them then if not before). DOJ’s reply memo also reveals that Wolfe deleted a ton of his texts to Watkins, as well.

The defendant and REPORTER #2 had an extraordinary volume of contacts: in the ten months between December 1, 2016, and October 10, 2017, alone, they exchanged more than 25,750 text messages and had 556 phone calls, an average of more than 83 contacts per day. The FBI was unable to recover a significant portion of these text messages because they had been deleted by the defendant.

All of this is to say two things: first, the government would not pick up Signal texts — at least not deleted ones — from simply imaging a phone. Then, using what they specify was a Rule 41 warrant that could indicate hacking, they were able to obtain Signal. At least some of the Signal texts the government has revealed pre-date when his phone was imaged.

That’s still inconclusive as to whether Wolfe had deleted Signal texts and FBI was able to recover some of them, or whether they were unable to find Signal texts that remained on his phone when they imaged it in October.

Whichever it is, it seems clear that they required additional methods (and custody of the phone) to find the Signal texts revealing four relationships with journalists he had successfully hidden until that point.

Which is why I worry that the government will claim it was unable to solve the investigation into who leaked Carter Page’s FISA order because of Signal, and use that claim as an excuse to crack down on the app.