Posts

Unpacking a January 6 Phone Warrant

Given the focus on legal authorities used in the January 6 investigation, I wanted to look at a search warrant affidavit for the phone of Karl Dresch, a Yooper arrested on January 19 for trespassing and obstructing the vote certification. FBI obtained it Wednesday and executed it yesterday.

The investigation into Dresch arose, as most of the January 6 investigations have, when some informed the FBI — in his case, on January 7 — that Dresch had posted about busting into the Capitol on Facebook. The FBI obtained a warrant for Dresch’s Facebook content, and then, on January 19, arrested him on trespass and obstruction charges. On January 22, in part because of his Facebook posts promising “we will be back” and in part because he had a 2013 arrest and felony conviction for a high speed chase to avoid arrest in Wisconsin, he was ordered detained pending trial. Shortly thereafter, the Houghton County Sheriff, Brian McLean, who knows both Karl and his father (who helped bust the Oklahoma City bombing terrorists), told a reporter Karl should have gotten released on bail.

His father, Stephen Dresch, who died in 2006, provided the FBI information a year prior that led agents to a stash of explosives one of the Oklahoma City bombers had hidden away at his since-vacated Kansas home.

[snip]

Despite the polar opposite outcomes, Houghton County Sheriff Brian J. McLean, who knows the Dresch family, called Stephen Dresch’s son “a chip off the old block.”

[snip]

Stephen Dresch, whom McLean described as a “brilliant, sharp guy,” and his son were “very vocal” about their beliefs, the sheriff of 24 years said. Karl Dresch “likes to give his opinion, whether other people want to hear it or not,” he said.

Houghton County deputies have dealt with Karl Dresch on “minor nuisance calls,” but never anything serious, and he wouldn’t be on a “list of people we’re concerned about,” McLean said.

[snip]

Sheriff McLean disagrees with the risk assessment. He said Karl Dresch doesn’t pose a significant risk to the public and “absolutely” should have received bond.

Since then there’s little else that has happened in this case. On February 3 he was indicted — again for the obstruction and trespassing charges, but still not an illegal possession charge tied to having two guns as a felon. On February 19, a CJA attorney filed an appearance for him. But there’s not even (in the docket) notice of his arraignment.

Now, over forty days after seizing the phone that the FBI believes he had with him on January 6, they have taken steps to access it, stating that they believe they will find evidence relating to his existing charges (trespassing and obstruction) along with unlawful possession.

Search warrant boilerplate for January 6 is slightly more comprehensive than for arrest warrants. In this case, it includes details of people calling out for Nancy Pelosi and other Members of Congress, a description of the note that Jacob Chansley left for Mike Pence in the Senate Chamber: “Justice is Coming.” It describes Eric Munchel and others wandering around with zip ties. That is, it culls the evidence from various insurrectionists that hints towards a more malign plot against Congress, without stating that explicitly. It is the story that DOJ may believe they will one day tell.

In this case, too, it includes details on the exact location and the size of the Capitol, including the Visitor’s Center.

U.S. Capitol Police (USCP), the FBI, and assisting law enforcement agencies are investigating a riot and related offenses that occurred at the United States Capitol Building, located at 1 First Street, NW, Washington, D.C., 20510 at latitude 38.88997 and longitude -77.00906 on January 6, 2021.

At the U.S. Capitol, the building itself has 540 rooms covering 175,170 square feet of ground, roughly four acres. The building is 751 feet long (roughly 228 meters) from north to south and 350 feet wide (106 meters) at its widest point. The U.S. Capitol Visitor Center is 580,000 square feet and is located underground on the east side of the Capitol.

I note the inclusion of these details because these measurements would be really useful in an affidavit that relied on details — such as the ones in Jeremy Groseclose’s arrest affidavit — that talk about the granularity of the location data the FBI is obtaining. In Groseclose’s case, a Google warrant IDed his presence in the Crypt to within 34 meters at 68% confidence. Given the size of the Capitol, then, a Google result like that would fairly clearly show the target in the Capitol, and (given a room the size of the Visitor’s Center) in the room in question.

The Visitor’s Center is one of two places inside the Capitol (the other is the Crypt) where Dresch took pictures and videos he later posted to Facebook, including this one, which court documents describe Facebook data doesn’t include the time for, but which he posted later that night.

So that may be one thing the FBI hopes to find by accessing this phone: More details about the photos Dresch took while in the Capitol. For example, there may be something on the video he took that implicates either him or others, and so want better evidence for trial.

But that’s one of the interesting absences in this affidavit. The warrant notes that Dresch used Verizon, but it doesn’t mention anything about his Verizon call records or — more especially — his location data. Presumably they have that, but have chosen not to include it.

It’s possible (indeed, the government has asserted they think they’ll find) more on the guns he has, in particular any evidence he brought them to DC either on January 6 or some follow-up trip, the one suggested by a second hotel receipt (note, in the existing affidavits, the FBI doesn’t say whom Dresch told, “we have your back give the word and we will be back even stronger,” after January 6, but Facebook surely has that).  If the FBI had reason to believe they could place someone at the Capitol with a gun, that would be an important investigative addition.

There are also his interlocutors, especially the guy, USER 2, with whom he was sharing information about what was going on in the Capitol during the event. The FBI undoubtedly knows who that is, but it’s possible FBI has reason to believe there may be more (such as deleted content) on the phone itself.

Finally, one reason the government is always going to want to exploit a phone is to obtain encrypted communications (like Signal) that wouldn’t be accessible from a provider.

None of this is at all momentous: Just an affidavit to search the phone of one presumably very minor guy, and one that can’t be all that operationally interesting (or else they would have sealed it, as virtually all search warrants currently are). Just one case among 300. At least on its face, just an effort to add another charge or learn more about other insurrectionists.

Timeline

December 16, 2020: Dresch posting about January 6: “1/6/2021=7/4/1771”

January 3: Dresch posts that he’s headed to DC: “NO EXCUSES! NO RETREAT! NO SURRENDER! TAKE THE STREETS! TAKE BACK OUR COUNTRY! 1/6/2021=7/4/1776”

January 7: Tip that Dresch posted on Facebook about entering the Capitol.

January 12: Warrant for Facebook account.

January 13: FBI obtains Facebook content. Among other things it shows the following posts from January 6 and 7:

  • January 6, 2:26: Picture 3 taken with a Moto e6 in the Crypt, which is under the Rotunda
  • 2:43: USER 2 messages Dresch that, Patriots are in the Capitol building now”
  • 2:44: Dresch responds to USER 2: I am, with picture of Capitol Visitor’s Center
  • 2:48: USER 2 messages Dresch that, “Word is police are getting ready to use teach gas.
  • 2:48: Dresch responds, “Been using it. Mask up.”
  • 3:13: Dresch posts, “Who’s house? OUR HOUSE!”
  • 3:14: Dresch posts Picture 3 with caption, “We are in”
  • 4:46: Dresch responds to comments saying “It was peaceful … still got a lil gas tho … mask on for safety
  • 5:17, 5:18: Dresch sends USER 3 two pictures with the caption, “That’s right outside the house of representative … we got in! Took a lil gas … wtf I love masks now!” Had the cops booking it”
  • 6:09: Dresch responds to comments saying, “we broke no glass no shoving I seen”
  • 8:32: Dresch posts crowd at Washington Monument, “Total Victory!”
  • 8:44: Dresch posts “I’m excited”
  • January 7, 12:11 AM: Dresch posts image from Visitor’s Center stating that “antifa did not take the capitol. that was Patriots. … those traitors Know who’s really in charge”
  • 8:32PM: Dresch posts to another post, “Mike Pence gave our country to the communist hordes, traitor scum like the rest of them, we have your back give the word and we will be back even stronger”

January 15: FBI obtains arrest warrant for Dresch

January 19: FBI surveils Dresch’s residence and then arrests him outside it, searches his home, finding:

  • A Motorola that may be a Moto e6
  • A bag that Dresch had with him in one of the photos he posted to Facebook, including:
    • A receipt from a hotel in Washington DC (no date described)
    • Eight boxes of ammunition
    • A CB radio
    • A Whistler laser/radar detector
    • A DC Metro Pass
    • A hotel receipt for a hotel in Chantilly, VA for arrival on January 5 and departure on January 7
  • A Russian SKS-type rifle with a bayonet
  • A shotgun

January 22: Because of prior felony involving evading arrest, Dresch detained pending trial

March 3: Warrant obtained

March 4: Warrant executed

Trump’s Role in a Seditious Conspiracy Won’t Go Away with an Impeachment Vote

There’s a conventional wisdom about the Donald Trump’s second impeachment trial, scheduled to start in ten days. WaPo predicts that impeachment will leave no more than a “bitter aftertaste.”

The Senate is hurtling toward an impeachment trial that will accomplish almost nothing by design and likely leave everyone with a bitter aftertaste.

Democratic voters will be furious that GOP senators refused to hold former president Donald Trump accountable for his role in encouraging supporters to march to the Capitol on Jan. 6. Republicans will be upset that congressional Democrats went through with an impeachment trial three weeks after Trump left the White House.

And independent voters, more focused on the health and economic crises fueled by the coronavirus pandemic, will wonder why Congress prioritized an impeachment process at all.

Perhaps most telling, WaPo describes Trump’s role as “encouraging” his supporters to march to the Capitol.

It’s true the word, “encouraged” appears in the article of impeachment against Trump.

He also willfully made statements that, in context, encouraged—and foreseeably resulted in—lawless action at the Capitol, such as: ‘‘if you don’t fight like hell you’re not going to have a country anymore’’. Thus incited by President Trump, members of the crowd he had addressed, in an attempt to, among other objectives, interfere with the Joint Session’s solemn constitutional duty to certify the results of the 2020 Presidential election, unlawfully breached and vandalized the Capitol, injured and killed law enforcement personnel, menaced Members of Congress, the Vice President, and Congressional personnel, and engaged in other violent, deadly, destructive, and seditious acts. [my emphasis]

But that description skips the “foreseeably result[ing]” in the interruption of the certification of the vote, the threats to Members of Congress, the deadly sedition that are also included in the article of impeachment.

Moreover, it ignores the other part of the article of impeachment, Trump’s other efforts to subvert democracy (the article describes his January 2 call to Brad Raffensberger explicitly), to say nothing of the description of Trump as a threat to national security.

President Trump’s conduct on January 6, 2021, followed his prior efforts to subvert and obstruct the certification of the results of the 2020 Presidential election.

[snip]

Wherefore, Donald John Trump, by such conduct, has demonstrated that he will remain a threat to national security, democracy, and the Constitution if allowed to remain in office, and has acted in a manner grossly incompatible with self-governance and the rule of law.

That’s a notable oversight, particularly given the — inexplicable — claim from ascendant Senate Judiciary Committee Chair Dick Durbin that we may never learn the full extent of Trump’s role in the coup attempt.

Sen. Richard J. Durbin (D-Ill.), the incoming chairman, said he would leave procedural questions up to the House managers.“I’m waiting to hear what their proposal is, but for us to suggest a trial strategy for the House managers, I don’t think that’s our job,” Durbin said.

So, instead, the Senate will rush through a trial in which the only evidence likely to be presented will be the stuff that senators themselves already lived, video clips of rioters breaking into the Capitol as senators fled through underground tunnels to their secure location.

Senators will likely not even attempt to answer the fundamental questions of every impeachment trial — what did the president know and when did he know it?

“It will be surprising to me if we ever know the answers to that,” Durbin said.

It may be true that impeachment managers will restrict themselves to the public record, though even that might include testimony from Raffensperger and evidence collected as part of the prosecution of insurrectionists. Q-Shaman Jacob Chansley even says he’d be willing to testify.

Lawyer Albert Watkins said he hasn’t spoken to any member in the Senate since announcing his offer to have Jacob Chansley testify at Trump’s trial, which is scheduled to begin the week of Feb. 8. Watkins said it’s important for senators to hear the voice of someone who was incited by Trump.

Watkins said his client was previously “horrendously smitten” by Trump but now feels let down after Trump’s refusal to grant Chansley and others who participated in the insurrection a pardon. “He felt like he was betrayed by the president,” Watkins said.

The words of Trump supporters who are accused of participating in the riot may end up being used against him in the impeachment trial. Chansley and at least four others people who are facing federal charges stemming from the riot have suggested they were taking orders from Trump.

If insurrectionists were to testify in person, the attendant security of orange jumpsuits and leg manacles might provide some sobering visuals (though COVID and real security concerns almost certainly rules that out).

But it seems foolish for any Senator to assume that the vote they’ll cast in a few weeks will make this thing go away forever.

That’s not even true for their Ukraine impeachment votes. Yesterday, Ukraine announced (much to Lev Parnas’ glee that Rudy Giuliani finally got Ukraine to announce an investigation) that it is launching a criminal probe into those — inside and outside Ukraine — who attempted to interfere in the 2020 election.

Andriy Yermak, the head of the office of Ukrainian President Volodymyr Zelenskiy, said on January 28 that Ukraine would do everything in its power to bring to justice forces within the country and outside it who attempted to damage relations between Ukraine and the United States.

“The State Bureau of Investigation has opened a criminal case,” Yermak was quoted as saying in an interview to the Ukrainian news outlet NV that was posted on the presidential website.

“The investigation is under way, and we are waiting for its results. The investigation must answer a lot of questions,” Yermak added.

Without anyone in the United States lifting a finger, then, Ukraine may provide damning new evidence about Trump’s attempt to coerce assistance on his “perfect phone call” with Volodymyr Zelensky that will make GOP negligence during the last impeachment more damning.

And in the case of the January 6 insurrection, DOJ has already mapped out a conspiracy charge that Trump could easily be charged under as well.

PURPOSE OF THE CONSPIRACY

18. The purpose of the conspiracy was to stop, delay, and hinder Congress’s certification of the Electoral College vote.

MANNER AND MEANS

19. CALDWELL, CROWL, and WATKINS, with others known and unknown, carried out the conspiracy through the following manner and means, among others, by:

a. Agreeing to participate in and taking steps to plan an operation to interfere with the official Congressional proceeding on January 6, 2021 (the “January 6 operation”);

b. Using social media, text messaging, and messaging applications to send incendiary messages aimed at recruiting as large a following as possible to go to Washington, D.C., to support the January 6 operation;

Meanwhile, Acting DC US Attorney Michael Sherwin has repeatedly refused to rule out incitement charges. Indeed, I’ve argued that DOJ almost certainly will need to incorporate at least Mike Flynn, if not Trump himself, in their description of the crimes of January 6, if only to distinguish the events of that day from other protected First Amendment activity — and at least some prosecutors in DC closer to the overall investigation seem to be doing that.

There’s no guarantee that Merrick Garland’s DOJ will have the courage to pursue Trump’s role in this (though thus far, Bill Barr appointee Michael Sherwin has not shied from such an investigation, and if he oversaw such a decision it would mitigate the political blowback). There’s no sign, yet, that DOJ has identified how the coup attempt tied into Rudy’s attempts to delay the certification.

But no Senator serving as juror in this impeachment should assume the investigation won’t, inevitably, disclose the machinations that tied Trump’s efforts to stay in office to the death and destruction on January 6. Indeed, there’s no guarantee that the actions of key jurors — like Josh Hawley and Ted Cruz for inciting the mob, Tommy Tuberville for his direct coordination with Rudy, and Lindsey Graham for his own efforts to throw out votes in Georgia and his meeting with accused insurrectionist Joe Biggs — won’t ultimately be incorporated into the larger conspiracy.

And so while it may be easy for lazy political journalism to spout conventional wisdom about everyone wanting to move on, this time around it is as likely as not that the votes cast next month will age poorly as the investigation into how Trump’s action ties to the death and destruction continues.