Posts

Four Years and 345 Days

As originally scheduled, Magistrate Judge Michael Harvey would have held a detention hearing today for Brian Cole, the guy accused of planting pipe bombs on January 5, 2021.

We might have learned more about evidence and motive at such a hearing, but now we’ll have to wait until December 30, if at all.

Last Wednesday, the AUSA in the case, submitted a filing basically saying, “Regarding your question about whether we still need a detention hearing on December 15, I respond that the defense wants another two weeks to review discovery before such a hearing, and we’d like an exclusion of time under Speedy Trial Act.”

The United States respectfully moves the Court to exclude time under the Speedy Trial Act from the date of defendant Brian J. Cole, Jr.’s arrest on December 4, 2025, through the date of the detention hearing, which the defense has requested to continue. 1

In response to the Court’s inquiry, the government conferred with defense counsel. Defense counsel has requested that the government represent the following to the Court in this motion: The defense requests that the Court continue the detention hearing in this case currently set for December 15, 2025, to allow the defense additional time to review the significant amount of discovery provided by the government to date. The defense consents to the exclusion of time under the Speedy Trial Act from December 4, 2025, through the date of the rescheduled detention hearing.

The government does not oppose a defense continuance of the detention hearing. The parties jointly request that the detention hearing be reset for December 30, 2025.

1 For administrative efficiency, the government is submitting a single motion reflecting the relief sought by both parties.

Before I unpack what this means — and what we can or cannot assume from this — let me point to this WSJ story that explains why it took so long to find Cole: Basically, an FBI Agent wrote code to be able to read cell tower dumps T-Mobile provided, which the government had claimed — for years! — was corrupted.

For four years, a tranche of cellphone data provided to the FBI by T-Mobile US sat on a digital shelf because investigators couldn’t figure out how to read it, people familiar with the matter said. The data turned out to be essential to cracking the case, the people said, a breakthrough that happened only recently when a tech-savvy law-enforcement officer wrote a new computer program that finally deciphered the information. That move led to the arrest of 30-year-old Brian Cole Jr. at his home in Northern Virginia, where he had been quietly living with his mother and other relatives.

[snip]

Increasingly desperate and under pressure to make progress, supervisors urged agents and analysts to take a new look at what they had, including the data from T-Mobile—reflecting phone locations based on internet usage—that investigators had set aside years earlier.

Once investigators were finally able to read the data, they said it led them to Cole’s phone number because his cellphone’s movements tracked what investigators had seen in surveillance footage.

I have no doubt that the government believed they couldn’t access some or most of the T-Mobile data; it is a problem that has shown up in court filings for years. How well-founded that belief was is something we may learn in the months ahead.

WSJ also describes why we’re getting — and why we should expect to continue getting  — so much leaking from this investigation: Because Kash Patel is claiming credit and accusing the FBI of sandbagging before now.

In a four-hour interview with investigators, Cole acknowledged placing the bombs, people familiar with the probe said. He expressed support for Trump and said he had embraced conspiracy theories regarding Trump’s 2020 election loss, the people said. He had thrown out the Air Max sneakers, he said. Cole hasn’t entered a plea, and his lawyer didn’t respond to requests for comment.

Inside the Justice Department, agents and prosecutors have privately expressed widespread relief that an arrest has finally been made, but also resentment over FBI Director Kash Patel, who has suggested that they didn’t work doggedly on the probe until Trump administration leadership arrived.

The assertion that Cole is a Trump supporter, which was always the most likely explanation for his actions, adds to the likelihood of leaks. All the people crowing about the Cole arrest — Pam Bondi, Kash, and Dan Bongino — could well get fired if they find proof of another Trump supporting terrorist. So they’re no doubt trying to minimize the chances that becomes public via official channels.

The fact that the FBI had to write code simply to read the T-Mobile data may explain something that I allude to here: The language the complaint uses to refer to location data is not described in the normal way, usually expressed as a percentage likelihood that a device was within a certain range at the time in question.

The seven transactions between the COLE CELLPHONE and Provider’s towers occurred at approximately 7:39 p.m., 7:44 p.m., 7:59 p.m., 8:14 p.m., 8:23 p.m., and 8:24 p.m. Two transactions took place at 7:39 p.m. During this time period, the COLE CELLPHONE had transactions with five different sectors on Provider’s cell towers.

a. At approximately 7:39:27 p.m., the COLE CELLPHONE interacted with a particular sector of Provider tower 59323, which faces southeast (approximately 120˚) from its location at 103 G Street, Southwest in Washington, D.C. (“Sector A”). Also at 7:39:27 p.m., the COLE CELLPHONE interacted with a particular sector of Provider tower 126187, which faces east1 (approximately 90˚) from its location at 200 Independence Avenue, Southwest in Washington, D.C. (“Sector B”). Video surveillance footage shows that at approximately 7:39:32 p.m., the individual who placed the pipe bombs walked westbound on D Street, Southeast and then turned southbound on South Capitol Street, Southeast. These locations are consistent with the coverage areas of Sector A and B.

b. At approximately 7:44:36 p.m., the COLE CELLPHONE interacted with Sector B of Provider tower 126187. Video surveillance footage shows that at approximately 7:44:36 p.m., the individual who placed the pipe bombs walked east on Ivy Street, Southeast. This location is consistent with the coverage area of Sector B.

Here, the complaint claims only that the cell tower data is consistent with Cole’s presence in a certain cardinal directions from the cell towers; it doesn’t even explain how far that cell site is.

Even without the hack of the data needed to read the T-Mobile data, this case might have been vulnerable on Fourth Amendment grounds. While the geofences for the Capitol itself have been sustained in a series of court orders, these tower dumps did not (as the Capitol-focused geofences did) collect data of people who were by definition culprits or victims. But if the T-Mobile data showing Cole’s location comes from some untested code, it would be far more vulnerable to challenge, with the likelihood of dueling experts about whether the software hack faithfully rendered the location data.

Sure, there’s the confession, but any good defense attorney will attempt to challenge any Miranda waiver, particularly in the case (as here) where a suspect is reportedly on the spectrum or is otherwise vulnerable to pressure.

Meanwhile, consider the implications of DOJ finding a way to read T-Mobile data that had been unavailable for years. What else might that data reveal? Might that data reveal a meeting between Cole and someone else on Capitol Hill on December 14?

Approximately three weeks before the pipe bombs were placed, on or about December 14, 2020, COLE made a purchase at a restaurant located near First and D Streets, Southeast. The restaurant is located across the street from the entrance to Rumsey Court on D Street, Southeast.

I think it inconceivable that Cole placed those bombs at the perfect location set to explode at the perfect time for an attack the following day without consultation with others. Which means any investigation into Cole could break open (or reopen) an investigation into the far more coordinated attack that was evident in movement that day but — for whatever reason — not charged.

Imagine the possibility that the FBI could find proof — and a witness — to explain how January 6 was an exceedingly well-coordinated terrorist attack? That would be sure to get Bondi, Kash, and Bongino fired!

As noted, DOJ asked for and got an exclusion of the 15-day delay in detention hearing time from the Speedy Trial Act (STA). That’s actually a very big deal, because when DOJ arrested Cole on December 5, the month they had to indict Cole under the STA coincided with the month that existed before the normal 5-year statute of limitations on most crimes expired.

The charges against Cole, 18 USC 844(d) & (i), actually have an extended (at least ten year) statute of limitations, as would some other charges, but some other possible charges (or conspiracy charges) might not.

So several things are likely going on:

First, while I think it likely FBI got their guy, if Cole’s confession is at all vulnerable to challenge, the case might be exceedingly weak, not least because the data has been manipulated.

Meanwhile, DOJ really is in crunch time regarding both the charges and any further investigation. That likely suits Trump’s appointees, who could be fired if the arrest of Cole provides cause to investigate further.

And that’s all on top of any colorable claim that Cole is entitled to the pardons Trump has already given his mob (not least if he had contact with someone else who has already been pardoned).

That’s the kind of mix that gives DOJ strong incentive to push for a plea, using as leverage the possibility of further charges, on top of an already draconian possible 40-year sentence.

Everyone else may be focused on holidays. But the people involved in this prosecution are likely involved in a very delicate game of chicken, as the ticking clock of dual deadlines threatens to explode.

Share this entry

Trump’s Terrorists

Things could get a bit awkward with two of Trump’s terrorists in the days ahead. Trump has done such a great job of memory-holing his insurrection, and yet it won’t entirely go away.

Start with Taylor Taranto. I’ve written about the mentally ill Navy veteran who trespassed on January 6 — just one of thousands of Trumpsters who invaded the Capitol — but then took up with the DC Jail crowd in the aftermath, growing increasingly unstable until when, after Trump posted Barack Obama’s address on Truth Social, Taranto started stalking Obama, as prosecutors described in a footnote of a motion to gag Trump this way:

[T]he defendant’s public targeting of perceived adversaries has resulted in threats, harassment, or intimidation. The public record is replete with other examples. See, e.g., United States v. Taranto, No. 1:23-cr-229, ECF No. 27 at 4-6 (D.D.C. Sep. 12, 2023) (affirming detention order for Taranto and explaining that, after “‘former President Trump posted what he claimed was the address of Former President Barack Obama’ on Truth Social,” Taranto— who had previously entered the Capitol on January 6, 2021—reposted the address, along with a separate post stating, “‘See you in hell, Podesta’s and Obama’s’” [sic], and then proceeded, heavily armed, to the area the defendant had identified as President Obama’s address, while livestreaming himself talking about “getting a ‘shot’ and an ‘angle,’” adding, “‘See, First Amendment, just say First Amendment, free speech’”) (quoting Taranto, ECF No. 20).

Like everyone else, Taranto was pardoned for his Jan6 trespass and his gun-related crimes were downgraded along with the rest of America’s defense against gun crimes. Trump appointee Carl Nichols sentenced him to time served on October 30, but not before Jeanine Pirro’s office tried to hide the sentencing memo (and prosecutors) who described Taranto’s role in Trump’s insurrection and Trump’s role in inciting Taranto’s stalking.

So he was free to go home to Seattle and attempt to rebuild his life from the chaos that Trump made of it.

Only he didn’t.

In recent days he has been back stalking DC, and specifically Jamie Raskin. The very same prosecutors who attempted to bury Trump’s role in inspiring Taranto’s crimes were stuck asking he be jailed again.

Assistant U.S. Attorney Travis Wolf said Taranto’s return to D.C., his erratic behavior and renewed livestreaming raised serious alarms that he was “on the path” to the same conduct that led to criminal charges against him two years earlier and urged that he be returned to jail.

Wolf described acute mental health concerns, a series of alleged violations of Taranto’s supervised release conditions, and alarming social media posts, including one from the parking lot of the Pentagon. The prosecutor discussed other details of Taranto’s case during a closed court session.

Trump appointee Carl Nichols tried to give Taranto one more chance to go back to Washington and get some help. But he continues to lurk around DC, figuring he still has time before he has to report to Probation in Washington on Wednesday.

The man needs help, and jail is not going to get him what he needs, but until he leaves DC, he remains a real concern.

He’s a reminder of what Trump does to people, driving around DC broadcasting as he goes.

According to the standards DOJ has used with ICE protestors, Trump should have been charged right along with Taranto.

Then there’s the possibility that efforts to prosecute alleged pipe bomber Brian Cole will backfire, at least on those — Pam Bondi, Kash Patel, and Dan Bongino — who crowed about the arrest on Thursday.

Since he was arrested there have been a series of leaks, starting with Ryan Reilly (who literally wrote the book on the January 6 investigation, with all that suggests about his possible sources) followed by Evan Perez (one of the best-sourced journalists at FBI), told the FBI he believed Donald Trump’s bullshit.

The man charged with planting two pipe bombs near the Democratic and Republican party headquarters on the eve of the Jan. 6 attack on the U.S. Capitol told the FBI he believed conspiracy theories about the 2020 election, according to two people familiar with the matter.

Brian Cole Jr., 30, is cooperating with the FBI, NBC News has reported, citing a separate person familiar with the matter. Cole appeared in court Friday, one day after he was charged with leaving pipe bombs outside the Republican National Committee and Democratic National Committee in the hours before Donald Trump supporters stormed the U.S. Capitol. Trump has falsely claimed the 2020 election was “rigged.”

Cole confessed to planting the devices outside the parties’ headquarters in the hours before the Capitol attack, three people familiar with the matter told NBC News. A federal prosecutor said in court on Friday that the suspect spoke with the government for more than four hours, but did not reveal the contents of those discussions.

Pirro has been out trying to disclaim the obvious: that Cole is one of Trump’s terrorists, not the insider threat that people like Dan Bongino and Ed Martin have been claiming since the attack.

Anna Bower tracked Martin’s effort to stoke conspiracy theories about the pipe bomber, including this screen cap.

Kash Patel who has fired people for claiming that Jan6ers were a terrible threat to the country, said that when you do what Cole did, “you attack the very being of our way of life”  — and he did so after Pam Bondi hailed his hard work to make the case.

And then Bongino went on Sean Hannity and confessed he was making shit up before.

Hannity, during his interview with his former colleague, gave Bongino an opportunity to criticize prior iterations of the Justice Department and FBI for failing to arrest anyone in the case, and praise his own colleagues for getting the job done. But then he asked Bongino about the FBI deputy director’s own role in promoting conspiracy theories about the bomber during Bongino’s past career as a right-wing commentator.

“You know, I don’t know if you remember this — this is before you became the deputy FBI director,” Hannity said. “You put a post on X right after this happened and you said there’s a massive cover-up because the person that planted those pipe bombs, they don’t want you to know who it is because it’s either a connected anti-Trump insider or an inside job. You said that, you know, long before you were even thought of as deputy FBI director.”

Bongino’s response was astounding. He looked down, as if embarrassed, and replied: “Yeah, that’s why I said to you this investigation’s just begun.” But after hemming and hawing about the confidence he and FBI Director Kash Patel have that they arrested the right person, he got real.

“Listen, I was paid in the past, Sean, for my opinions,” he explained. “That’s clear. And one day, I’ll be back in that space. But that’s not what I’m paid for now. I’m paid to be your deputy director, and we base investigations on facts.”

And when you peruse the possible explanations about why FBI didn’t find Cole before this week (I suspect it’s because FBI had far less evidence against Cole when they arrested him on Thursday than against virtually every other Jan6er; they just got fucking lucky that they got the right guy), they all feed left wing concerns.

Did Steve D’Antuono take steps to distract from Cole back in 2021, as some right wingers are now suggesting? If so, he did that between the time he took insufficient steps to prevent the attack and those times in 2022 when he attempted to kill any investigation of Trump.

Did Chris Wray intentionally stall this investigation? Then what does that say about the rest of the January 6 investigation?

And what if Cole says he qualifies for one or both of the pardons Trump already gave to people, like him, who responded to Trump’s false claims by attacking the Capitol. After all Enrique Tarrio, who was convicted of sedition and adjudged a terrorist at sentencing, was gone from the Capitol a whole day before Cole allegedly placed those bombs, and Tarrio got a full pardon. What is Pardon Attorney Ed Martin going to say to conclude that Cole is somehow different from the hundreds of others, including a good many who brought incendiary devices, who have been running free since January?

It’s still possible Jocelyn Ballantine will manage to bury Cole’s pro-Trump leanings — or at least avoid implicating anyone who worked with Cole to plant the bombs in the precisely perfect place to create a distraction on January 6. Ballantine has played such a role before, and emails that Dan Richman submitted in his bid to get his data back before the FBI can violate his Fourth Amendment rights again suggest she was part of the process that led to that violation in the first place.

But until then, the lesson Dan Bongino just learned could be devastating. When you follow the facts, even the most rabid Trump supporter may discover that Trump’s terrorists are the ones threatening America.

Share this entry

Fridays with Nicole Sandler

Listen on Spotify (transcripts available)

Listen on Apple (transcripts available)

Update: Here are the photos of James Joyce’s Martello Tower I mentioned.

Looking towards the sea from the strand.

A tie Joyce gave Samuel Beckett, which is exhibited in the Martello Tower.

Me, pretending to be Buck Mulligan, spying the ship named the Samuel Beckett.

 

Share this entry

What’s Not Being Said about the Alleged Pipe Bomber

The arrest affidavit for Brian Cole, the 30 year old guy charged as the pipe bomber today, is here.

The evidence consists of:

Phone records placing him on Capitol Hill at the time the FBI believes the bombs to have been placed.

The seven transactions between the COLE CELLPHONE and Provider’s towers occurred at approximately 7:39 p.m., 7:44 p.m., 7:59 p.m., 8:14 p.m., 8:23 p.m., and 8:24 p.m. Two transactions took place at 7:39 p.m. During this time period, the COLE CELLPHONE had transactions with five different sectors on Provider’s cell towers.

a. At approximately 7:39:27 p.m., the COLE CELLPHONE interacted with a particular sector of Provider tower 59323, which faces southeast (approximately 120˚) from its location at 103 G Street, Southwest in Washington, D.C. (“Sector A”). Also at 7:39:27 p.m., the COLE CELLPHONE interacted with a particular sector of Provider tower 126187, which faces east1 (approximately 90˚) from its location at 200 Independence Avenue, Southwest in Washington, D.C. (“Sector B”). Video surveillance footage shows that at approximately 7:39:32 p.m., the individual who placed the pipe bombs walked westbound on D Street, Southeast and then turned southbound on South Capitol Street, Southeast. These locations are consistent with the coverage areas of Sector A and B.

b. At approximately 7:44:36 p.m., the COLE CELLPHONE interacted with Sector B of Provider tower 126187. Video surveillance footage shows that at approximately 7:44:36 p.m., the individual who placed the pipe bombs walked east on Ivy Street, Southeast. This location is consistent with the coverage area of Sector B.

c. At approximately 7:59:36 p.m., the COLE CELLPHONE interacted with a particular sector of Provider tower 147990 which faces south (approximately 180˚) from its location at 200 Independence Avenue, Southwest in Washington, D.C. (“Sector C”). Video surveillance footage shows that at approximately 7:59:38 p.m., the individual who placed the pipe bombs walked southbound on New Jersey Avenue, Southeast then turned eastbound on E Street, Southeast. These locations are consistent with the coverage area of Sector C.

d. At approximately 8:14:36 p.m., the COLE CELLPHONE interacted with Provider tower 45111 which faces west (approximately 255˚) from its location at 101 Independence Avenue, Southeast in Washington, D.C. (“Sector D”). Video surveillance footage shows that at approximately 8:14:15 p.m., the individual who placed the pipe bombs exited Rumsey Court and walked westbound through an alley between the Capitol Hill Club and the RNC then walked northbound onto First Street, Southeast. This location is consistent with the coverage area of Sector D.

e. At approximately 8:23:59 p.m. and 8:24:06 p.m., the COLE CELLPHONE interacted with Provider tower 144340, which faces west (approximately 295˚) from its location at 600 Pennsylvania Avenue, Southeast in Washington, D.C. (“Sector E”). Video surveillance footage last captures the individual who placed the pipe bombs at 8:18 p.m. walking eastbound on Rumsey Court in the direction of tower 144340, which is approximately 1/2 mile east of the individual’s last recorded location. The last recorded location is consistent with the coverage area of Sector E.

A license plate reader showing his car arriving at Capitol Hill that evening.

On January 5, 2021, at approximately 7:10 p.m., COLE’s Nissan Sentra was observed driving past a License Plate Reader at the South Capitol Street exit from Interstate 395 South, which is less than one-half mile from the location where the individual who placed the devices was first observed on foot near North Carolina and New Jersey Avenues, Southeast at 7:34 p.m. Approximately 5 minutes later, at 7:39:27 p.m., the COLE CELLPHONE began to interact with Provider towers in the area.

Purchases of components consistent with the construction of the pipebombs, including paying cash for a battery connector consistent with the pipe bombs in 2019.

Both pipe bombs were manufactured using a nine-volt (9V) battery connector with attached red and black wires. The nine-volt battery connectors used in the pipe bombs had identifying information on the black and red insulated wires that were consistent with those distributed in North America by a known company and its predecessors (the “Nine Volt Distributor”). COLE purchased five of the Nine Volt Distributor’s nine-volt battery connectors from Micro Center in northern Virginia on or about November 12 and December 28, 2019, including cash purchases made during the December transaction. Fewer than 8,000 of Nine Volt Distributor’s nine-volt battery connectors were distributed in the United States between December 2017 and January 5, 2021. [my emphasis]

A purchase made across the street from the alley way on December 14.

Approximately three weeks before the pipe bombs were placed, on or about December 14, 2020, COLE made a purchase at a restaurant located near First and D Streets, Southeast. The restaurant is located across the street from the entrance to Rumsey Court on D Street, Southeast.

There’s nothing that ties those weird sneakers to Cole at all. [Corrected]

Certainly, he’s a candidate, and should have been IDed as such in 2021. But the affidavit lacks the kind of thing we saw all the time in real January 6 affidavits: Personal communications. Signs of planning in the period after Trump announced the rally. While there are a bunch of components purchased in November 2020, after the election, there’s not a single data point in the affidavit between when Trump announced the rally on December 19 and when Cole was on Capitol Hill on January 5, 2021.

Surely, FBI has already obtained warrants for all that and it is at least consistent with someone who had been playing with bomb-making for two years before placing these bombs.

But they’re not telling what’s in them.

You get the feeling they might not tell the story Kash Patel and Pam Bondi want to tell. What if finding the pipe bomber gets them fired, just like responding competently to COVID got Anthony Fauci fired and targeted?

DOJ has assigned Jocelyn Ballantine to this case. You may recall that she made false claims in support of efforts to throw out the Mike Flynn case in 2020.

Update: Per Ryan Reilly, Cole (who wouldn’t have been assigned an attorney yet) told the FBI that he believed in 2020 election fraud claims.

Share this entry