Posts

Revisiting the First Time President Trump Blabbed Out Classified Information for Political Gain

I’d like to revisit what might be the first time in his presidency that Donald Trump blabbed out highly classified information for political gain. Trump appears to have endangered the investigation into CIA’s stolen hacking tools, all to blame Obama for the leak.

It happened on March 15, 2017, during an interview with Tucker Carlson.

Amid a long exchange where Tucker challenges Trump, asking why he claimed — 11 days earlier — that Obama had “tapped” Trump Tower without offering proof, Trump blurted out that the CIA was hacked during the Obama Administration.

Tucker: On March 4, 6:35 in the morning, you’re down in Florida, and you tweet, the former Administration wiretapped me, surveilled me, at Trump Tower during the last election. Um, how did you find out? You said, I just found out. How did you learn that?

Trump: I’ve been reading about things. I read in, I think it was January 20th, a NYT article, they were talking about wiretapping. There was an article, I think they used that exact term. I read other things. I watched your friend Bret Baier, the day previous, where he was talking about certain very complex sets of things happening, and wiretapping. I said, wait a minute, there’s a lot of wiretapping being talked about. I’ve been seeing a lot of things. Now, for the most part I’m not going to discuss it because we have it before the committee, and we will be submitting things before the committee very soon, that hasn’t been submitted as of yet. But it’s potentially a very serious situation.

Tucker: So 51,000 people retweeted that, so a lot of people thought that was plausible, they believe you, you’re the president. You’re in charge of the agencies, every intelligence agency reports to you. Why not immediately go to them and gather evidence to support that?

Trump: Because I don’t want to do anything that’s going to violate any strength of an agency. You know we have enough problems. And by the way, with the CIA, I just want people to know, the CIA was hacked and a lot of things taken. That was during the Obama years. That was not during, us, that was during the Obama situation. Mike Pompeo is there now, doing a fantastic job. But we will be submitting certain things, and I will be perhaps speaking about this next week. But it’s right now before the Committee, and I think I want to leave it at that. I have a lot of confidence in the committee.

Tucker: Why not wait to tweet about it until you can prove it? Does it devalue your words when you can’t provide evidence?

Trump: Well because the NYT wrote about it. You know, not that I respect the NYT. I call it the failing NYT. They did write on January 20 using the word wiretap. Other people have come out with —

Tucker: Right, but you’re the President. You have the ability to gather all the evidence you want.

Trump: I do, I do. But I think that frankly we have a lot right now and I think if you watch, uh, if you watched the Brett Baier and what he was saying and what he was talking about and how he mentioned the word wiretap, you would feel very confident that you could mention the name. He mentioned it and other people have mentioned it. But if you take a look at some of the things written about wiretapping and eavesdropping, and don’t forget when I say wiretap, those words were in quotes, that really covers, because wiretapping is pretty old fashioned stuff. But that really covers surveillance and many other things. And nobody ever talks about the fact that it was in quotes but that’s a very important thing. But wiretap covers a lot of different things. I think you’re going to find some very interesting items over the next two weeks. [my emphasis]

It was clear even at the time that it was a reference to the Vault 7 files, now alleged to have been leaked to WikiLeaks by Joshua Schulte; the first installment of files were released eight days earlier.

The next day, Adam Schiff, who as the then-Ranking HPSCI member, likely had been briefed on the leak, responded to Trump’s comments and suggested that, while Trump couldn’t have broken the law for revealing classified information, he should nevertheless try to avoid releasing it like this, without any kind of consideration of the impact of it.

Last night, the President stated on Fox News that “I just wanted people to know, the CIA was hacked, and a lot of things taken–that was during the Obama years.” In his effort to once again blame Obama, the President appears to have discussed something that, if true and accurate, would otherwise be considered classified information,

It would be one thing if the President’s statement were the product of intelligence community discussion and a purposeful decision to disclose information to the public, but that is unlikely to be the case. The President has the power to declassify whatever he wants, but this should be done as the product of thoughtful consideration and with intense input from any agency affected. For anyone else to do what the President may have done, would constitute what he deplores as “leaks.”

Trump did reveal information the CIA still considered classified. At the very least, by saying that CIA got hacked, he confirmed the Vault 7 documents were authentic files from the CIA, something the government was not otherwise confirming publicly at that time. (Compare Mike Pompeo’s oblique comments about the leak from a month later.)

His reference to the volume of stolen files may have been based on what the CIA had learned from reviewing the initial dump; court filings make it clear the CIA still did not know precisely what had been stolen.

His reference to a hack, rather than a leak, is an interesting word choice, as the compromise has usually been called a leak. But Schulte’s initial search warrants listed both Espionage and the Computer Fraud and Abuse Act, meaning the government was treating it as (partly) a hacking investigation. And some of the techniques he allegedly used to steal the files are the same that hackers use to obfuscate their tracks (which is unsurprising, given that Schulte wrote some of the CIA’s obfuscation tools).

Perhaps the most damning part of Trump’s statement, however, was the main one: that the theft had taken place under Obama. WikiLeaks’ initial release was totally noncommittal about when they obtained the files, but said it had been “recent[].” By making it clear that the government knew the theft had taken place in 2016 and not more “recently,” Trump revealed a detail that would have made it more likely Schulte would realize they believed he was the culprit (though he knew from the start he’d be a suspect), given that he’d left the agency just days after Trump was elected.

The most damning part of all of this, though, is the timing. Trump made these comments at an unbelievably sensitive time in the investigation.

Tucker did the interview while accompanying Trump to Detroit on March 15, 2017, which means the interview took place sometime between 10:50 AM and 3:30 PM (Tucker said the interview happened at Willow Run Airport, but this schedule says he flew into DTW). Unless it was given special billing, it would have aired at 9PM on March 15.

That means Trump probably made the comments as the FBI was preparing a search of Schulte’s apartment, the first step the FBI took that would confirm for Schulte that he was the main suspect in the leak. Trump’s comments likely aired during the search, before the moment Schulte left his apartment with two passports while the search was ongoing.

CIA had had a bit of advanced warning about the leak. In the lead-up to the leaks (at least by February 3), a lawyer representing Julian Assange, Adam Waldman, was trying to use the Vault 7 files to make a deal with the US government, at first offering to mitigate the damage of the release for some vaguely defined safe passage for Assange. The next day, WikiLeaks first hyped the release, presumably as part of an attempt to apply pressure on the US. Shortly thereafter, Waldman started pitching Mark Warner (who, with Richard Burr, could have granted Assange immunity in conjunction with SSCI’s investigation). On February 17, Jim Comey told Warner to stop his negotiations, though Waldman would continue to discuss the issue to David Laufman at DOJ even after the initial release. Weeks later, WikiLeaks released the initial dump of files on March 7.

An early WaPo report on the leak (which Schulte googled for its information about what the CIA knew before WikiLeaks published) claimed that CIA’s Internal Security had started conducting its own investigation without alerting FBI to the leak (though obviously Comey knew of it by mid-February). The same report quoted a CIA spox downplaying the impact of a leak it now calls “catastrophic.”

By March 13, the day the FBI got its first warrant on Schulte, the FBI had focused on Schulte as the primary target of the investigation. They based that focus on the following evidence, which appears to incorporate information from the CIA’s own internal investigation, an assessment of the first document dump, and some FBI interviews with his colleagues in the wake of the first release:

  • The FBI believed (and still maintains) that the files were stolen from the onsite backup server
  • Schulte was one of a small group of SysAdmins who had privileges to that server (in the initial warrant they said just three people did but have since revised the number to five)
  • The FBI believed (mistakenly) that the files were copied on March 7, 2016, a time when one of the other two known SysAdmins was offsite
  • Schulte had had a blow-up with a colleague that led to him souring on his bosses
  • During the period the CIA was investigating that blow-up, Schulte had reset his administrative privileges to restore his access to the backup server and one project he was working on
  • As part of his August security clearance renewal, some of Schulte’s colleagues said they thought he could be subject to coercion and was not adhering to rules on removable media
  • Just before he left, Schulte created two documents claiming to have raised concerns about the security of the CIA’s servers that (the government claims) he didn’t actually raise
  • Names identifying the two other SysAdmins who had access to the backup server, but not Schulte’s, were included in the initial release
  • In six days since the initial Vault 7 release, Schulte had contacted colleagues and told them he thought he’d be a suspect but was not the leaker

Having obtained a warrant based off that probable cause, on the afternoon of March 13, FBI agents went to conduct a covert search of Schulte’s apartment. The FBI was trying to conduct the search before a trip to Mexico Schulte was scheduled to take on March 16, which (as the affidavit noted) would have been only his second trip outside the US reflected in DHS records. But when the FBI got to Schulte’s apartment, they found a slew of computer devices (listed at PDF 116), making the covert search impractical. So overnight, they obtained a second warrant for an overt search; the FBI obtained that warrant at 1:36 AM on March 14. During that same overnight trip to the magistrate, the FBI also obtained warrants for Schulte’s Google, Reddit, and GitHub accounts.

There’s a lack of clarity about this detail in the public record: the warrant is dated March 14, but it is described as the “March 15 warrant.” The overt search continued through the night in question, so it could either be March 14-15 or March 15-16. The government’s response to Schulte’s motion to suppress the search says, “The Overt Warrant was signed during the early morning hours of March 14, 2017, and the FBI executed the warrant the same day.” But a May 5, 2017 affidavit (starting at PDF 129) says the overt search of Schulte’s apartment took place on March 15.

Whatever day the search happened, it appears that the search started when the lead agent approached Schulte in the lobby of Bloomberg, perhaps as he was leaving work, and asked if he had a role in the leak, which Schulte denied. (This conversation is one basis for Schulte’s false statements charge; the Bill of Particulars describing the interview says it took place on March 15.) The agent got Schulte to confirm he was traveling to Mexico on March 16, then got Schulte to let them into his apartment (Bloomberg is at 120 Park Avenue; Schulte lived at 200 E 39th Street, five blocks away). The search of Schulte’s apartment went through the night. Sometime between 10 and 11 PM, Schulte left his apartment, telling the FBI Agents he’d return around 11:30 PM. By 12:15 AM he hadn’t returned, so the lead FBI Agent went and found him leaving Bloomberg. They told him they had found classified information in his apartment, and asked for his passports. He went back to his workstation to retrieve them, and voluntarily handed them over. The affidavit describes Schulte being put on leave by Bloomberg on March 16, the last day he reported to work at Bloomberg (which would be consistent with the search taking place on the night of March 15-16).

If the search took place overnight on March 14-15, Trump’s statements might have reflected knowledge the search had occurred (and that FBI had found classified information in Schulte’s apartment that would sustain an arrest on false statements and mishandling classified information charges, if need be). If the search took place overnight on March 15-16 (which seems to be what the record implies), it would mean Trump made the comments before the search and they would have been aired on Fox News during it.

In other words, Trump may well have made the comments at a time when FBI was trying to avoid giving Schulte any advance notice because they were afraid he might destroy evidence.

In addition, Trump undoubtedly made the comments (and Schiff highlighted the significance of them) before Schulte had follow-up interviews on March 20 and 21, at which he denied, among other things, ever making CIA’s servers more vulnerable to compromise. If Schulte had read Trump’s comment he’d be more worried about anything akin to hacking.

The question is, how much of what Trump said reflected real knowledge of the investigation, and to what degree should he have known that blurting this out could be unbelievably damaging to the investigation?

Given Trump’s imprecision in speech, his comments could derive entirely from the Vault 7 release itself, or at least a really high level briefing (with pictures!) of the compromise and CIA’s efforts to mitigate it.

But there are two pieces of evidence that suggest Trump may have been briefed in more detail about Schulte as a target.

Jim Comey testified on June 8, 2017 that, in addition to asking him to, “let this [Flynn thing] go,” Trump had asked him about a classified investigation, but that conversation was entirely professional.

WARNER: Tens of thousands. Did the president ever ask about any other ongoing investigation?

COMEY: No.

WARNER: Did he ever ask about you trying to interfere on any other investigation?

COMEY: No.

WARNER: I think, again, this speaks volumes. This doesn’t even get to the questions around the phone calls about lifting the cloud. I know other members will get to that, but I really appreciate your testimony, and appreciate your service to our nation.

COMEY: Thank you, Senator Warner. I’m sitting here going through my contacts with him. I had one conversation with the president that was classified where he asked about our, an ongoing intelligence investigation, it was brief and entirely professional.

Obviously there were a ton of investigations and this conversation could have taken place after Trump made the public comments. But the Vault 7 investigation would have been one of the most pressing investigations in the months before Comey got fired.

More directly on point, in his Presumption of Innocence blog, Schulte describes the interactions with the FBI during the search — which are consistent with them taking place on March 15 — this way (he has not sought to suppress the statements he made that night, which suggests his claims of coercion aren’t strong enough to impress his attorneys):

The FBI set an artificial and misguided deadline on the night before I was to depart NYC for Cancun to prevent me from leaving the country. Despite my insistence with them that the notion someone would flee the country AFTER the publication literally made no sense—if it were me communicating with WikiLeaks then obviously I would have made damn sure to leave BEFORE it happened—they were persistent in their belief that I was guilty. The FBI literally told me that everyone ”up to the top” knew we were having this conversation and that “they” could not afford to let me leave the country. “They” could not afford another national embarrassment like Snowden. “They” would not, under any circumstances, allow me to leave the country. The FBI were prepared and willing to do anything and everything to prevent me from leaving the country including threaten my immediate arrest arrest unless I surrendered my passport. I did NOT initially consent, but the FBI held me against my will without any arrest warrant and even actively disrupted my attempts to contact an attorney. Intimidated, fearful, and without counsel, I eventually consented. I was immediately suspended from work

Schulte’s an egotist and has told obvious lies, especially in his public statements attempting to claim innocence. But if it’s true that the FBI agents told him everyone “up to the top” knew they were having the conversation with him on March 15, it might reflect knowledge that people at least as senior as Comey or Sessions or Pompeo knew the FBI was going to conduct an overt search with one goal being to prevent Schulte from leaving the country. And given the purported reference to Snowden and the way the entire government pursued him, it is not impossible that Trump had been asked to authorize Schulte’s arrest if he didn’t surrender his passports.

In other words, it is certainly possible that when Trump boasted that the CIA’s hacking tools had been stolen under Obama and not under his Administration (an interesting claim to begin with, given the delay in CIA alerting the FBI that WaPo reported), he had been briefed about Schulte within the last 48 hours or even that morning.

To be clear, I’m not suggesting that this comment was a deliberate attempt to sabotage the FBI investigation. Trump has a habit of mindlessly repeating whatever he has heard most recently, so if Trump were briefed on the investigative steps against Schulte on the 14th or 15th, it’s not surprising he brought it up when sitting with Tucker mid-day on the 15th, particularly given that they were discussing surveillance.

But imagine how this would look to the FBI as Trump started engaging in outright obstruction of the Russian investigation, particularly by firing Comey. There’s nothing in the public record that suggests a tie between Schulte’s leaks and Russia. But Schulte’s leaks (most notably the Marble Framework he authored) not only would have made it easier for Russia to identify CIA’s Russian targets, but they would have forced CIA to rebuild during a period it was trying to figure out what had happened in 2016 (and NSA would be in the same position, post Shadow Brokers). When the FBI was trying to keep their focus on Schulte secret for one more day so they could get to his apartment before he started destroying things, Trump sat before a TV camera and made a comment that might have alerted Schulte the FBI did, indeed, believe he was the culprit.

And Trump did so all to blame Obama for a catastrophic leak rather than himself.

Dan Coats Still Refusing to Provide the Evidence that Russia Didn’t Affect the Election

Last month, I noted a troubling exchange between Martin Heinrich, Dan Coats, and Richard Burr in the Global Threats Hearing.

Martin Heinrich then asked Coats why ODNI had not shared the report on election tampering even with the Senate Intelligence Committee.

Heinrich: Director Coats, I want to come back to you for a moment. Your office issued a statement recently announcing that you had submitted the intelligence community’s report assessing the threats to the 2018 mid-term elections to the President and to appropriate Executive Agencies. Our committee has not seen this report. And despite committee requests following the election that the ODNI brief the committee on any identified threats, it took ODNI two months to get a simple oral briefing and no written assessment has yet been provided. Can you explain to me why we haven’t been kept more fully and currently informed about those Russian activities in the 2018–

Chairman Richard Burr interrupts to say that, in fact, he and Vice Chair Mark Warner have seen the report.

Burr: Before you respond, let me just acknowledge to the members that the Vice Chairman and I have both been briefed on the report and it’s my understanding that the report at some point will be available.

Coats then gives a lame excuse about the deadlines, 45 days, then 45 days.

Coats: The process that we’re going through are two 45 day periods, one for the IC to assess whether there was anything that resulted in a change of the vote or anything with machines, uh, what the influence efforts were and so forth. So we collected all of that, and the second 45 days — which we then provided to the Chairman and Vice Chairman. And the second 45 days is with DHS looking, and DOJ, looking at whether there’s information enough there to take — to determine what kind of response they might take. We’re waiting for that final information to come in.

After Coats dodges his question about sharing the report with the Committee, Heinrich then turns to Burr to figure out when they’re going to get the information. Burr at least hints that the Executive might try to withhold this report, but it hasn’t gotten to that yet.

Heinrich: So the rest of us can look forward — so the rest of us can then look forward to reading the report?

Coats: I think we will be informing the Chairman and the Vice Chairman of that, of their decisions.

Heinrich: That’s not what I asked. Will the rest of the Committee have access to that report, Mr. Chairman?

[pause]

Heinrich: Chairman Burr?

Burr; Well, let me say to members we’re sort of in unchartered ground. But I make the same commitment I always do, that anything that the Vice Chairman and myself are exposed to, we’ll make every request to open the aperture so that all members will be able to read I think it’s vitally important, especially on this one, we’re not to a point where we’ve been denied or we’re not to a point that negotiations need to start. So it’s my hope that, once the final 45-day window is up that is a report that will be made available, probably to members only.

Coming as it did in a hearing where it became clear that Trump’s spooks are helpless in keeping Trump from pursuing policies that damage the country, this exchange got very little attention. But it should!

DOJ missed its 45 day plus 45 day deadline of reporting whether any election tampering had had an effect. But just by one day. The day after their deadline, the Big Dick Toilet Salesman Matt Whitaker and serial liar Kirstjen Nielsen gave Trump a report claiming that any tampering had not had any impact on the election.

Although the specific conclusions within the joint report must remain classified, the Departments have concluded there is no evidence to date that any identified activities of a foreign government or foreign agent had a material impact on the integrity or security of election infrastructure or political/campaign infrastructure used in the 2018 midterm elections for the United States Congress. This finding was informed by a report prepared by the Office of the Director of National Intelligence (ODNI) pursuant to the same Executive Order and is consistent with what was indicated by the U.S. government after the 2018 elections.

While the report remains classified, its findings will help drive future efforts to protect election and political/campaign infrastructure from foreign interference.

Then, today, CyberComm boasted that that they had helped deter Russia during the midterms.

Senators from both political parties on Thursday praised the military’s cyber force for helping secure last year’s midterm elections, with one suggesting it was largely due to U.S. Cyber Command that the Russians failed to affect the 2018 vote.

“Would it be fair to say that it is not a coincidence that this election went off without a hitch and the fact that you were actively involved in the protection of very important infrastructure?” Sen. Mike Rounds (R-S.D.) asked Gen. Paul Nakasone, the command’s leader, at a hearing of the Senate Armed Services Committee.

Military officials have said new authorities, approved over the last year, enabled CyberCom to be more aggressive — and effective — in what they privately say was an apparent success. Nakasone, who also heads the National Security Agency, stopped short of saying it was CyberCom that made the difference, telling Rounds that safeguarding the election was the agencies’ “number-one priority.”

But ODNI is still not providing SSCI — the people who are supposed to see such evidence — proof. Heinrich wrote Dan Coats a letter, signed by every member of SSCI,

Your office a statement in December that you had submitted the Intelligence Committee’s report assessing threats to the 2018 elections to the president and appropriate executive agencies. This month, the acting Attorney General and the Secretary of Homeland Security announced they had submitted their joint report evaluating the impact of any foreign interference on election infrastructure for the infrastructure of political organizations during the midterm elections.

While the agencies provided brief unclassified summaries of the reports’ findings, the Select Committee on Intelligence has not been provided either report. We request that you provide to all Committee Members and cleared staff both classified reports required by EO 13848 as soon as possible. Those reports are necessary for the Committee to meet its mission and charter to conduct vigorous oversight over the intelligence and intelligence-related activities of the United States Government.

They’re clearly hiding something. The question is whether it’s that Trump didn’t try to prevent tampering, or that some of the efforts — included the known effort to hack Claire McCaskill — actually did have an effect.

 

On SSCI’s Investigation: Manafort “Conspired” Whether or Not Trump Also “Colluded”

I’d like to point out something about this NBC report headlined, “Senate has uncovered no direct evidence of conspiracy between Trump campaign and Russia,” but instead showing,

investigators disagree along party lines when it comes to the implications of a pattern of contacts they have documented between Trump associates and Russians — contacts that occurred before, during and after Russian intelligence operatives were seeking to help Donald Trump by leaking hacked Democratic emails and attacking his opponent, Hillary Clinton, on social media.

I sometimes beat up on Ken Dilanian and I don’t mean to do so here. Putting the headline and lead aside, his report shows the disagreement here, and he even references Mark Warner’s recent focus on Paul Manafort’s sharing of polling data with Konstantin Kilimnik (though it’s not clear he asked Richard Burr about the report).

After it recently emerged that Trump campaign chairman Paul Manafort shared campaign polling data with a man the FBI says is linked to Russian intelligence, Warner called that the most persuasive evidence yet of coordination.

“This appears as the closest we’ve seen yet to real, live, actual collusion,” he said on CNN.

No evidence has emerged, however, linking the transfer of polling data to Trump.

Natasha Bertrand says the report soft-pedals the Democrats’ belief.

Senate Intelligence Committee aide tells me, re: NBC story, that right now there is “a common set of facts” that the panel is working with, “and a disagreement about what those facts mean.” They add: “We are closer to the end than the beginning, but we’re not wrapping up.”

But I think something else is going on, in addition to any downplaying Democrats’ views.

It’s that the report shifts back and forth between “conspiracy” and “collusion.”

After two years and 200 interviews, the Senate Intelligence Committee is approaching the end of its investigation into the 2016 election, having uncovered no direct evidence of a conspiracy between the Trump campaign and Russia, according to both Democrats and Republicans on the committee.

[snip]

“If we write a report based upon the facts that we have, then we don’t have anything that would suggest there was collusion by the Trump campaign and Russia,” said Sen. Richard Burr, R-N.C., the chairman of the Senate Intelligence Committee, in an interview with CBS News last week.

[snip]

“We were never going find a contract signed in blood saying, ‘Hey Vlad, we’re going to collude,'” one Democratic aide said.

[snip]

House Republicans announced last year they had found no evidence of collusion, but their report came under immediate criticism as a highly partisan product that excluded Democrats.

[snip]

“Senator Richard Burr, The Chairman of the Senate Intelligence Committee, just announced that after almost two years, more than two hundred interviews, and thousands of documents, they have found NO COLLUSION BETWEEN TRUMP AND RUSSIA!” Trump tweeted Sunday. “Is anybody really surprised by this?”

[snip]

“This [sharing polling data] appears as the closest we’ve seen yet to real, live, actual collusion,” he said on CNN.

[snip]

The final Senate report may not reach a conclusion on whether the contacts added up to collusion or coordination with Russia, Burr said.

Democrats told NBC News that’s a distinct possibility.

“What I’m telling you is that I’m going to present, as best we can, the facts to you and to the American people,” Burr told CBS. “And you’ll have to draw your own conclusion as to whether you think that, by whatever definition, that’s collusion.”

The story promises to talk about conspiracy, but then ends up talking about “collusion,” going so far as quoting Burr saying you need to draw your own conclusion about what you think the definition of “collusion” is.

That’s an important distinction, especially in a report that talks about Paul Manafort, not least because Manafort has already pled guilty to conspiring with Konstantin Kilimnik, albeit for covering up crimes in 2018 rather than committing them in 2016.

And while Burr complains we can’t know his or any of the other flunkies’ motives, Andrew Weissmann made it clear that Manafort told the grand jury he didn’t have just one motive when he handed highly detailed, recent polling data to Konstantin Kilimnik to be handed over to his Ukrainian and Russian paymasters.

And I think that in the grand jury, Mr. Manafort said that from his perspective, [sharing polling data] which he admitted at that point was with — he understood that it was going to be given by [redacted] to the [redacted] and to Mr. redacted 9 character name], both. That from his perspective, it was — there was no downside — I’m paraphrasing — it was sort of a win-win. That there was nothing — there was no negatives.

[snip]

My answer, with respect to the Court’s question about what it is — what the defendant’s intent was in terms of what he thought [redacted] I was just trying to answer that question, even though that’s not one of the bases for saying there was a lie here. And so I was just trying to answer that question. And what I meant by his statement that there’s no downside, is that can you imagine multiple reasons for [redacted]. And I think the only downside —

THE COURT: You meant no downside to him?

MR. WEISSMANN: Yes.

THE COURT: You weren’t suggesting that there was nothing — there’s no scenario under which this could be a bad thing?

MR. WEISSMANN: Oh, sorry. Yes. I meant there was no downside — Mr. Manafort had said there was no downside to Mr. Manafort doing it.

[snip]

MR. WEISSMANN: And meaning all of this is a benefit. The negative, as I said, was it coming out that he did this.

This August 2, 2016 data hand-off occurred in the specific context of Manafort trying to get whole on his $20 million debt to Oleg Deripaska. The data was also going to some Ukrainian oligarchs that Manafort expected to pay him $2.4 million in November 2016. And all that’s aside from whether Manafort expected the Russians to do anything with the data that might help Trump.

He was badly underwater, and — according to his grand jury testimony, at least as described by Weissmann — he clandestinely handed off recent detailed polling data to a guy connected to the agency that was still hacking Hillary Clinton, to be shared with a bunch of oligarchs who could help him reverse his financial fortunes.

It seems there’s a conspiracy there one way another. Either Manafort effectively stole Trump’s campaign data and traded it to foreigners for monetary gain. And/or Manafort handed over that data expecting that the campaign would get a thing of value from the foreigners he was sharing it with.

Richard Burr would seem to argue that’s not “collusion” unless Trump knew about it (whether he did is one of the questions Mueller posed to Trump).

But it is a conspiracy, an agreement with Konstantin Kilimnik to commit one or more crimes, right there in the middle of the election season. Whether Mueller will charge it or do something else with it remains to be seen. But it is fairly clearly a conspiracy, down to the clandestine arrivals and departures from the dark cigar lounge.

Ultimately, Burr’s retreat to that word “collusion” is a tell. Because, given the public facts in this case, Republicans should be outraged that Trump’s campaign manager was so disloyal he shared highly sensitive data with potentially malign actors. Republicans should be outraged that Trump’s campaign manager was putting his own financial imperatives ahead of sound campaign practice.

But they’re not. For some reason, Republicans are not squawking about the explanation for this data hand-off that would suggest the campaign didn’t expect to benefit.

As I disclosed last July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

The Disinformation Campaign Targeting Mueller and the Delayed Briefing to SSCI on Russian Election Interference

A lot of people are reporting and misreporting details from this Mueller filing revealing that it had been the target of disinformation efforts starting in October.

1000 non-sensitive files leaked along with the file structure Mueller provided it with

To substantiate an argument that Concord Management should not be able to share with Yevgeniy Prigozhin the sensitive discovery that the government has shared with their trollish lawyers, Mueller revealed that on October 22, someone posted 1000 files turned over in discovery along with a bunch of other crap, partially nested within the file structure of the files turned over in discovery.

On October 22, 2018, the newly created Twitter account @HackingRedstone published the following tweet: “We’ve got access to the Special Counsel Mueller’s probe database as we hacked Russian server with info from the Russian troll case Concord LLC v. Mueller. You can view all the files Mueller had about the IRA and Russian collusion. Enjoy the reading!”1 The tweet also included a link to a webpage located on an online file-sharing portal. This webpage contained file folders with names and folder structures that are unique to the names and structures of materials (including tracking numbers assigned by the Special Counsel’s Office) produced by the government in discovery.2 The FBI’s initial review of the over 300,000 files from the website has found that the unique “hashtag” values of over 1,000 files on the website matched the hashtag values of files produced in discovery.3 Furthermore, the FBI’s ongoing review has found no evidence that U.S. government servers, including servers used by the Special Counsel’s Office, fell victim to any computer intrusion involving the discovery files.

1 On that same date, a reporter contacted the Special Counsel’s Office to advise that the reporter had received a direct message on Twitter from an individual who stated that they had received discovery material by hacking into a Russian legal company that had obtained discovery material from Reed Smith. The individual further stated that he or she was able to view and download the files from the Russian legal company’s database through a remote server.

2 For example, the file-sharing website contains a folder labeled “001-W773.” Within that folder was a folder labeled “Yahoo.” Within that folder was a folder labeled “return.” Within the “return” folder were several folders with the names of email addresses. In discovery in this case, the government produced a zip file named “Yahoo 773.” Within that zip file were search warrant returns for Yahoo email accounts. The names of the email accounts contained in that zip file were identical to the names of the email address folders within the “return” subfolder on the webpage. The webpage contained numerous other examples of similarities between the structure of the discovery and the names and structures of the file folders on the webpage. The file names and structure of the material produced by the government in discovery are not a matter of public record. At the same time, some folders contained within the Redstone Hacking release have naming conventions that do not appear in the government’s discovery production but appear to have been applied in the course of uploading the government’s production. For example, the “001- W773” folder appears within a folder labeled “REL001,” which is not a folder found within the government’s production. The naming convention of folder “REL001” suggests that the contents of the folder came from a production managed on Relativity, a software platform for managing document review. Neither the Special Counsel’s Office nor the U.S. Attorney’s Office used Relativity to produce discovery in this case. [my emphasis]

It sounds like Mueller’s office found out about it when being contacted by the journalist who had been alerted to the content on Twitter.

But before Mueller asked Concord’s trollish lawyers about it, the defense attorneys — citing media contacts they themselves had received — contacted prosecutors to offer a bullshit excuse about where the files came from.

On October 23, 2018, the day after the tweet quoted above, defense counsel contacted the government to advise that defense counsel had received media inquiries from journalists claiming they had been offered “hacked discovery materials from our case.” Defense counsel advised that the vendor hired by the defense reported no unauthorized access to the non-sensitive discovery. Defense counsel concluded, “I think it is a scam peddling the stuff that was hacked and dumped many years ago by Shaltai Boltai,” referencing a purported hack of Concord’s computer systems that occurred in approximately 2014. That hypothesis is not consistent with the fact that actual discovery materials from this case existed on the site, and that many of the file names and file structures on the webpage reflected file names and file structures from the discovery production in this case.

Without any hint of accusation against the defense attorneys (though this motion is accompanied by an ex parte one, so who knows if they offered further explanation there), Mueller notes any sharing of this information for disinformation purposes would violate the protective order in the case.

As stated previously, these facts establish a use of the non-sensitive discovery in this case in a manner inconsistent with the terms of the protective order. The order states that discovery may be used by defense counsel “solely in connection with the defense of this criminal case, and for no other purpose, and in connection with no other proceeding, without further order of this Court,” Dkt. No. 42-1, ¶ 1, and that “authorized persons shall not copy or reproduce the materials except in order to provide copies of the materials for use in connection with this case by defense counsel and authorized persons,” id. ¶ 3. The use of the file names and file structure of the discovery to create a webpage intended to discredit the investigation in this case described above shows that the discovery was reproduced for a purpose other than the defense of the case.

Update: Thursday evening, Mueller submitted another version of this clarifying that the @HackingRedstone tweets alerting journalists to the document dump were DMs, and so not public (or visible to the defense). The first public tweet publicizing the dump came on October 30, so even closer to the election.

Shortly after the government filed, defense counsel drew the government’s attention to the following sentence, which appears on page nine of the filing: “On October 22, 2018, the newly created Twitter account @HackingRedstone published the following tweet: ‘We’ve got access to the Special Counsel Mueller’s probe database as we hacked Russian server with info from the Russian troll case Concord LLC v. Mueller. You can view all the files Mueller had about the IRA and Russian collusion. Enjoy the reading!’” Defense counsel pointed out that this sentence could be read to suggest that the Twitter account broadcast a publicly-available “tweet” on October 22. In fact, the Twitter account @HackingRedstone began sending multiple private direct messages to members of the media promoting a link to the online file-sharing webpage using Twitter on October 22. The content of those direct messages was consistent with, but more expansive than, the quoted tweet to the general public, which was issued on October 30. By separate filing, the government will move to file under seal the text of the direct messages. The online file sharing webpage was publicly accessible at least starting on October 22.

I’m not sure it makes the defense response any more or less suspect. But it does tie the disinformation even more closely with the election.

The Mueller disinformation was part of a month-long election season campaign

This thread, from one of the journalists who was offered the information, put it all in context back on November 7, the day after the election.

The thread shows how the release of the Mueller-related files was part of a month-long effort to seed a claim that the Internet Research Agency had succeeded in affecting the election.

Update: This story provides more background.

Other signs of the ongoing investigation into Yevgeniy Prigozhin’s trolls

Given how the Mueller disinformation functioned as part of that month-long, election oriented campaign, I’m more interested in this passage from the Mueller investigation than that the investigation had been targeted. Mueller argues that they shouldn’t have to share the sensitive discovery with Yevgeniy Prigozhin because the sensitive discovery mentions uncharged individuals who are still trying to fuck with our elections.

First, the sensitive discovery identifies uncharged individuals and entities that the government believes are continuing to engage in operations that interfere with lawful U.S. government functions like those activities charged in the indictment.

To be sure, we knew the investigation into Prigozhin’s trolls was ongoing. On October 19, just days before these files got dropped, DOJ unsealed an EDVA complaint, which had been filed under seal on September 28, against Prigozhin’s accountant, Alekseevna Khusyaynova. Along with showing Prigozhin’s trolls responding to the original Internet Research Agency indictment last February, it showed IRA’s ongoing troll efforts through at least June of last year.

Then, in December, Concord insinuated that Mueller prosecutor Rush Atkinson had obtained information via the firewall counsel and taken an investigative step on that information back on August 30.

On August 23, 2018, in connection with a request (“Concord’s Request”) made pursuant to the Protective Order entered by the Court, Dkt. No. 42-1, Concord provided confidential information to Firewall Counsel. The Court was made aware of the nature of this information in the sealed portion of Concord’s Motion for Leave to Respond to the Government’s Supplemental Briefing Relating to Defendant’s Motion to Dismiss the Indictment, filed on October 22, 2018. Dkt. No. 70-4 (Concord’s “Motion for Leave”). Seven days after Concord’s Request, on August 30, 2018, Assistant Special Counsel L. Rush Atkinson took investigative action on the exact same information Concord provided to Firewall Counsel. Undersigned counsel learned about this on October 4, 2018, based on discovery provided by the Special Counsel’s Office. Immediately upon identifying this remarkable coincidence, on October 5, 2018, undersigned counsel requested an explanation from the Special Counsel’s Office, copying Firewall Counsel on the e-mail.

[snip]

Having received no further explanation or information from the government, undersigned counsel raised this issue with the Court in a filing made on October 22, 2018 in connection with the then-pending Motion to Dismiss. In response to questions from the Court, Firewall Counsel denied having any communication with the Special Counsel’s Office.

This was a bid to obtain live grand jury investigative information, one that failed earlier this month after Mueller explained under seal how his prosecutors had obtained this information and Dabney Friedrich denied the request.

What this filing, in conjunction with Josh Russell’s explanatory Twitter thread, reveals is that the Mueller disinformation effort was part of a disinformation campaign targeted at the election.

Dan Coats doesn’t want to share the report on Russian election tampering with SSCI

And I find that interesting because of a disturbing exchange in a very disturbing Global Threats hearing the other day. After getting both Director of National Intelligence Dan Coats and FBI Director Christopher Wray to offer excuses for White House decisions to given security risks like Jared Kushner security clearance, Martin Heinrich then asked Coats why ODNI had not shared the report on election tampering even with the Senate Intelligence Committee.

Heinrich: Director Coats, I want to come back to you for a moment. Your office issued a statement recently announcing that you had submitted the intelligence community’s report assessing the threats to the 2018 mid-term elections to the President and to appropriate Executive Agencies. Our committee has not seen this report. And despite committee requests following the election that the ODNI brief the committee on any identified threats, it took ODNI two months to get a simple oral briefing and no written assessment has yet been provided. Can you explain to me why we haven’t been kept more fully and currently informed about those Russian activities in the 2018–

Chairman Richard Burr interrupts to say that, in fact, he and Vice Chair Mark Warner have seen the report.

Burr: Before you respond, let me just acknowledge to the members that the Vice Chairman and I have both been briefed on the report and it’s my understanding that the report at some point will be available.

Coats then gives a lame excuse about the deadlines, 45 days, then 45 days.

Coats: The process that we’re going through are two 45 day periods, one for the IC to assess whether there was anything that resulted in a change of the vote or anything with machines, uh, what the influence efforts were and so forth. So we collected all of that, and the second 45 days — which we then provided to the Chairman and Vice Chairman. And the second 45 days is with DHS looking, and DOJ, looking at whether there’s information enough there to take — to determine what kind of response they might take. We’re waiting for that final information to come in.

After Coats dodges his question about sharing the report with the Committee, Heinrich then turns to Burr to figure out when they’re going to get the information. Burr at least hints that the Executive might try to withhold this report, but it hasn’t gotten to that yet.

Heinrich: So the rest of us can look forward — so the rest of us can then look forward to reading the report?

Coats: I think we will be informing the Chairman and the Vice Chairman of that, of their decisions.

Heinrich: That’s not what I asked. Will the rest of the Committee have access to that report, Mr. Chairman?

[pause]

Heinrich: Chairman Burr?

Burr; Well, let me say to members we’re sort of in unchartered ground. But I make the same commitment I always do, that anything that the Vice Chairman and myself are exposed to, we’ll make every request to open the aperture so that all members will be able to read I think it’s vitally important, especially on this one, we’re not to a point where we’ve been denied or we’re not to a point that negotiations need to start. So it’s my hope that, once the final 45-day window is up that is a report that will be made available, probably to members only.

Coming as it did in a hearing where it became clear that Trump’s spooks are helpless in keeping Trump from pursuing policies that damage the country, this exchange got very little attention. But it should!

The Executive Branch by law has to report certain things to the Intelligence Committees. This report was mandated by Executive Order under threat of legislation mandating it.

And while Coats’ comment about DOJ, “looking at whether there’s information enough there to take — to determine what kind of response they might take,” suggests part of the sensitivity about this report stems from a delay to provide DOJ time to decide whether they’ll take prosecutorial action against what they saw in the election, the suggestion that only members of the committee (not staffers and not other members of Congress) will ever get the final report, as well as the suggestion that Coats might even fight that, put this report on a level of sensitivity that matches covert actions, the most sensitive information that get shared with Congress.

Maybe the Russians did have an effect on the election?

In any case, going back to the Mueller disinformation effort, that feels like very familiar dick-wagging, an effort to make key entities in the US feel vulnerable to Russian compromise. Mueller sounds pretty sure it was not a successful compromise (that is, the data came from Concord’s lawyers, not Mueller).

But if the disinformation was part an effort to boast that Putin’s allies had successfully tampered with the vote — particularly if Russia really succeeded in doing so — it might explain why this report is being treated with the sensitivity of the torture or illegal spying program.

Update: I’ve corrected this to note that in the end the Intelligence Authorization did not mandate this report, as was originally intended; Trump staved that requirement off with an Executive Order. Still, that still makes this look like an attempt to avoid admitting to Congress that your buddy Putin continues to tamper in US elections.

As I disclosed last July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

The Year Long Trump Flunky Effort to Free Julian Assange

The NYT has an unbelievable story about how Paul Manafort went to Ecuador to try to get Julian Assange turned over. I say it’s unbelievable because it is 28 paragraphs long, yet it never once explains whether Assange would be turned over to the US for prosecution or for a golf retirement. Instead, the story stops short multiple times of what it implies: that Manafort was there as part of paying off Trump’s part of a deal, but the effort stopped as soon as Mueller was appointed.

Within a couple of days of Mr. Manafort’s final meeting in Quito, Robert S. Mueller III was appointed as the special counsel to investigate Russian interference in the 2016 election and related matters, and it quickly became clear that Mr. Manafort was a primary target. His talks with Ecuador ended without any deals.

The story itself — which given that it stopped once Mueller was appointed must be a limited hangout revealing that Manafort tried to free Assange, complete with participation from the spox that Manafort unbelievably continues to employ from his bankrupt jail cell — doesn’t surprise me at all.

After all, the people involved in the election conspiracy made multiple efforts to free Assange.

WikiLeaks kicked off the effort at least by December, when they sent a DM to Don Jr suggesting Trump should make him Australian Ambassador to the US.

Hi Don. Hope you’re doing well! In relation to Mr. Assange: Obama/Clinton placed pressure on Sweden, UK and Australia (his home country) to illicitly go after Mr. Assange. It would be real easy and helpful for your dad to suggest that Australia appoint Assange ambassador to DC “That’s a really smart tough guy and the most famous australian you have! ” or something similar. They won’t do it, but it will send the right signals to Australia, UK + Sweden to start following the law and stop bending it to ingratiate themselves with the Clintons. 12/16/16 12:38PM

Weeks later, Hannity would go to the Embassy to interview Assange. Assange fed him the alternate view of how he obtained the DNC emails, a story that would be critical to Trump’s success at putting the election year heist behind him, if it were successful. Trump and Hannity pushed the line that the hackers were not GRU, but some 400 pound guy in someone’s basement.

Then the effort actually shifted to Democrats and DOJ. Starting in February through May 2017, Oleg Deripaska and Julian Assange broker Adam Waldman tried to convince Bruce Ohr or Mark Warner to bring Assange to the US, using the threat of the Vault 7 files as leverage. In February, Jim Comey told DOJ to halt that effort. But Waldman continued negotiations, offering to throw testimony from Deripaska in as well. He even used testimony from Christopher Steele as leverage.

This effort has been consistently spun by the Mark Meadows/Devin Nunes/Jim Jordan crowd — feeding right wing propagandists like John Solomon — as an attempt to obstruct a beneficial counterintelligence discussion. It’s a testament to the extent to which GOP “investigations” have been an effort to spin an attempt to coerce freedom for Assange.

Shortly after this effort failed, Manafort picked it up, as laid out by the NYT. That continued until Mueller got hired.

There may have been a break (or maybe I’m missing the next step). But by the summer, Dana Rohrabacher and Chuck Johnson got in the act, with Rohrabacher going to the Embassy to learn the alternate story, which he offered to share with Trump.

Next up was Bill Binney, whom Trump started pushing Mike Pompeo to meet with, to hear Binney’s alternative story.

At around the same time, WikiLeaks released the single Vault 8 file they would release, followed shortly by Assange publicly re-upping his offer to set up a whistleblower hotel in DC.

Those events contributed to a crackdown on Assange and may have led to the jailing of accused Vault 7 source Joshua Schulte.

In December, Ecuador and Russia started working on a plan to sneak Assange out of the Embassy.

A few weeks later, Roger Stone got into the act, telling Randy Credico he was close to winning Assange a pardon.

These efforts have all fizzled, and I suspect as Mueller put together more information on Trump’s conspiracy with Russia, not only did the hopes of telling an alternative theory fade, but so did the possibility that a Trump pardon for Assange would look like anything other than a payoff for help getting elected. In June, the government finally got around to charging Schulte for Vault 7. But during the entire time he was in jail, he was apparently still attempting to leak information, which the government therefore obtained on video.

Ecuador’s increasing crackdown on Assange has paralleled the Schulte prosecution, with new restrictions, perhaps designed to provide the excuse to boot Assange from the Embassy, going into effect on December 1.

Don’t get me wrong: if I were Assange I’d use any means I could to obtain safe passage.

Indeed, this series of negotiations — and the players involved — may be far, far more damning for those close to Trump. Sean Hannity, Oleg Deripaska, Paul Manafort, Chuck Johnson, Dana Rohrabacher, Roger Stone, and Don Jr, may all worked to find a way to free Assange, all in the wake of Assange playing a key role in getting Trump elected. And they were conducting these negotiations even as WikiLeaks was burning the CIA’s hacking tools.

Who Told Carter Page that James Wolfe Was the Source of the FISA Leak?

There’s a detail in the Statement of the Offense filed in conjunction with the guilty plea former Senate Intelligence Committee Director of Security James Wolfe worth further attention.

As I had noted when Wolfe was indicted, while the indictment catches Wolfe red-handed in lies about unclassified leaks Wolfe gave to Ali Watkins and some NBC reporters, it seems more interested in, and therefore probably arose out of, Wolfe’s ties with the reporters on the WaPo story first reporting that Carter Page had been targeted with a FISA order. Rather than having to prove that Wolfe leaked classified FISA information to a journalist with better operational security than the others, the government chose instead to charge him for the more easily proved case that he lied to the FBI.

The statement of offense confirms that the investigation arose in response to the FISA story.

On April 11, 2017, classified national security information concerning the existence and predication of FBI surveillance of an individual (“MALE-1”) pursuant to the Foreign Intelligence Surveillance Act (FISA) was published in an article authored by three reporters, including REPORTER #1.

In April 2017, the Federal Bureau of Investigation (FBI) opened an investigation into the unauthorized disclosure of this classified information to the news media.

And whereas the indictment had mostly discussed Wolfe’s conversations with the WaPo reporter obliquely, the statement of the offense describes how Wolfe followed up by email after meeting the reporter on December 9, 2015, and how the reporter then checked in the day before the election.

What’s more interesting, however, are the details about the aftermath of the story, when Carter Page wrote to the journalist in question and BCCed Wolfe.

On May 8, 2017, MALE-1 emailed REPORTER #1 complaining about REPORTER #1’s reporting of him (MALE-1). According to the metadata recovered during the search of Wolfe’s email, Wolfe was blind-copied on that email by MALE-1.

The day before Page sent that email, he had written a letter to Richard Burr and Mark Warner, complaining about the WaPo story and Ali Watkins’ reporting that Page was the anonymous person named in the  case. It seems that Page either learned or discovered that Wolfe might be the person who leaked the FISA news.

And as the Statement lays out, it seems that Wolfe and the journalist in question exchanged an encrypted file.

On May 11, 2017, at 11:13 a.m., REPORTER #1 emailed Wolfe, “What’s your cell?” The signature block of REPORTER #1’s email contained the reporter’s name, affiliation with a national news outlet, and telephone numbers.

On May 11, 2017, at 5:16 p.m., REPORTER #1 sent a second email to Wolfe, writing “Hi! When can we get coffee?” This time, the signature block of the second email included a 44-character long code made up of letters and numbers that appears to be a “PGP” fingerprint. If used, this fingerprint would have permitted Wolfe to send REPORTER #1 an email using an application that would encrypt the contents of the message, but not the subject line or the name of the sender.

Between the December 9, 2015, November 7, 2016, and two May 11, 2017 emails, the Statement lays out four email exchanges between Wolfe and this journalist. But the indictment says there was a fifth, possibly in June 2017.

For example, between in or around December 2015 and in or around June 2017, WOLFE and REPORTER #1 communicated at least five times using his SSCI email account.

In any case, that Page BCCed Wolfe suggests that he suspected Wolfe was the source, and perhaps said as much in his email to the reporter (thus explaining the follow-up between them).

As it is this Statement (and the indictment of Natalie Mayflower Sours Edwards for sharing FinCen data with Jason Leopold yesterday, but I’ll return to that) may suggest that the government obtained the reporter’s emails, but then parallel constructed doing so by collecting Wolfe’s. But it also suggests that Page knew precisely who leaked the FISA information.

As I disclosed in July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

Donald Trump’s Bubble May Be Robert Mueller’s Greatest Weapon

Robert Mueller has a slew of really good lawyers working for him. But I think his biggest asset is Donald Trump’s bubble.

Consider this NYT story, in which a bunch of lawyers anonymously blame each other for getting 16 months into the Special Counsel investigation without ever figuring out what the President did.

The lawyers have only a limited sense of what many witnesses — including senior administration officials and the president’s business associates — have told investigators and what the Justice Department plans to do with any incriminating information it has about Mr. Trump, according to interviews with more than a dozen people close to the president.

What is more, it is not clear if Mr. Trump has given his lawyers a full account of some key events in which he has been involved as president or during his decades running the Trump Organization.

[snip]

Mr. Dowd took Mr. Trump at his word that he had done nothing wrong and never conducted a full internal investigation to determine the president’s true legal exposure.

[snip]

And once Mr. Dowd was gone, the new legal team had to spend at least 20 hours interviewing the president about the episodes under investigation, another necessary step Mr. Dowd and his associates had apparently not completed.

In spite of the effort to blame all this on Dowd, the NYT article provides abundant evidence (which they, in typical Maggie and Mike fashion, don’t seem aware of) that Trump’s lawyers continue to be clueless.

There’s the notion that just 20 hours of Trump interviews would be sufficient for nailing down the actual story. Don McGahn, after all, has had 30 hours of interviews with Mueller’s team, and while he has played several central roles, he’s not the principal. And, unlike Trump, he can and presumably did tell a mostly consistent story.

There’s the admission that Trump’s lawyers actually don’t know how ten senior officials testified.

During Mr. Dowd’s tenure, prosecutors interviewed at least 10 senior administration officials without Mr. Trump’s lawyers first learning what the witnesses planned to say, or debriefing their lawyers afterward — a basic step that could have given the president’s lawyers a view into what Mr. Mueller had learned.

Complain all you want that Dowd didn’t obstruct competently. But the Joint Defense Agreement (the one that gave Rudy no advance warning that Paul Manafort had flipped on the President) is what Rudy has always pointed to to justify his confidence that Trump is not at any risk. So Rudy is, by the standards of the anonymous people leaking to Maggie and Mike, just as incompetent.

Perhaps best of all is the claim of an anonymous Maggie and Mike source that poor Jay Sekulow was left to clean up after Dowd’s, and only Dowd’s, mistakes.

In March, Mr. Dowd resigned, telling associates that he disagreed with the president’s desire to sit for an interview with Mr. Mueller — one form of cooperation he opposed — and leaving Mr. Sekulow with the task of rebuilding the legal team from scratch, and without knowing many of the details of the case. Mr. Dowd left few notes or files about the case, which had to be recreated months after the fact.

Somehow, Ty Cobb, the guy brought in after Marc Kasowitz left amid concerns that Trump was obstructing justice, who oversaw responding to discovery requests and who was initially celebrated as being very aggressive, gets no blame. Cobb was the guy who put McGahn in a defensive crouch — leading directly to 20 of his 30 hours of testimony — after blabbing in public about him hiding documents.

Crazier still, Jay Sekulow gets no blame in this narrative, even though Sekulow was around during all of Dowd’s purportedly mistaken decisions. As recently as March, Sekulow was quite confident that his undeniable expertise in litigating the right wing’s ressentiment prepared him to deal with the challenges of a Special Counsel investigation.

When Jay Sekulow joined President Donald Trump’s legal team for the Russia investigation last summer, he was largely expected to serve as the public face of the group. But after former lead attorney John Dowd resigned last week, and with other top lawyers reportedly reluctant to join the team, Sekulow is now the key player in one of the most high-stakes investigations in the world.

“I have maintained since the beginning of the representation that my interest is representing the client,” Sekulow tells TIME. “And it may take different forms at different times, and we’re just right now in a different phase.”

[snip]

Peter Flaherty, who worked for Romney on both campaigns and has known Sekulow for more than a decade, offers effusive praise for Sekulow that draws on the world of Boston sports.

“Jay is a combination of Bill Belichick and Tom Brady, wrapped into one super-lawyer,” Flaherty says, citing the New England Patriots’ coach and quarterback. “He is capable of both devising successful strategy in a conference room, as well as being able to execute it in a courtroom.”

Critics say that legal expertise in high-minded constitutional issues won’t translate well to the guts of a criminal case. But Sekulow says he feels his “broad background” in the law has prepared him for the current challenge, citing a recent case he worked on in which the IRS admitted to unfairly scrutinizing tax forms of conservative groups.

In the wake of Manafort’s plea deal, Sekulow seems less certain he’s got control of the situation.

Here’s the thing though. This is a 2,100-word story presented as truth, disclosing evidence (albeit unacknowledged) that the lawyers who have serially managed press outreach (Sekulow, then Rudy) are clueless. It repeats, as Maggie and Mike always do, two key threads of the spin from these men: that Trump’s only exposure is obstruction and that the end result will be a report.

[Manafort’s] plea brings to four the number of former close associates of Mr. Trump who have agreed to cooperate with Robert S. Mueller III, the special counsel investigating Russian interference in the election and obstruction of justice by the president.

And while Mr. Trump’s lawyers insist Mr. Mueller has nothing on their client about colluding with Russia, they are bracing for him to write a damaging report to Congress about whether the president obstructed justice.

[snip]

The sense of unease among the president’s lawyers can be traced, in part, to their client. Mr. Trump has repeatedly undermined his position by posting on Twitter or taking other actions that could add to the obstruction case against him.

[snip]

Even after Mr. Mueller’s appointment, Mr. Trump did things like ask witnesses about what they told Mr. Mueller’s investigators and put out misleading statements about contacts between his campaign and Russia, which appear to have deepened the special counsel’s examination of possible obstruction.

A mere review of Jay Sekulow’s own list, drafted in March, of questions Mueller might ask Trump, should make it clear to anyone exercising a tiny degree of skepticism that the claim Mueller is exclusively focused on obstruction is utter nonsense. And after the speaking criminal information released with Manafort’s plea, the expectation of a report should be treated far more critically.

But it’s not.

In an article about how Trump’s lawyers, generally, are clueless, and demonstrating though not reporting that the lawyers providing information to the press are part of that general cluelessness, Maggie and Mike don’t pause to reflect on whether that leaves them, too, clueless.

So when Trump tries to understand his plight by reading Maggie and Mike, he would believe a fiction largely created by the lies he has already told his lawyers and his preference for PR rather than solid legal advice.

Of course, it gets worse from there. Trump has benefitted from nine months of Devin Nunes-led intelligence, fed both via staffers and through a stable of incompetent right wing stenographers, about the investigation. I know for a fact that the most competent Republicans who have read the most investigative documents do not have a grasp about either the scope of the investigation or how it evolved (though someone at least understands that after August 1, 2017, the investigation got far more risky for the President).

But when you take that misunderstanding about the investigation and launder it through incompetent hacks like John Solomon, then the picture it provides is even more misleading.

Which led us to Trump’s decision on Monday to declassify a bunch of stuff.

That led Mark Warner, who has a better though still incomplete understanding of the potential risk to Trump, to quip, “Be careful what you wish for,” suggesting that the documents might be very incriminating to Trump.

Batshit crazier still, Trump went on to do an interview with the aforementioned John Solomon. (The Hill, unlike the NYT and virtually all other outlets, has the dignity to label interviews where Trump tells reporters a bunch of bullshit “opinion.”) In it, Trump suggests he had the authority and should have fired Jim Comey they day he won the primaries (an interesting suggestion by itself as Mueller appears to be investigating Roger Stone’s activities from that time period), which would likely have resulted in a Hillary win.

“If I did one mistake with Comey, I should have fired him before I got here. I should have fired him the day I won the primaries,” Trump said. “I should have fired him right after the convention, say I don’t want that guy. Or at least fired him the first day on the job. … I would have been better off firing him or putting out a statement that I don’t want him there when I get there.”

Crazier still, Trump admits that he has no idea what is included in the vast swath of documents he has already ordered to be released.

Trump said he had not read the documents he ordered declassified but said he expected to show they would prove the FBI case started as a political “hoax.”

“I have had many people ask me to release them. Not that I didn’t like the idea but I wanted to wait, I wanted to see where it was all going,” he said.

In the end, he said, his goal was to let the public decide by seeing the documents that have been kept secret for more than two years. “All I want to do is be transparent,” he said.

As I’ve noted here and elsewhere, even careful readers, to say nothing of the frothy right, have little visibility on how this investigation evolved (even the tiny bit more visibility I have makes me aware of how much I don’t know). If the smartest Republican upstream of Trump’s concerns about the genesis of the investigation doesn’t understand it, then far stupider Congressmen like Mark Meadows, who hasn’t reviewed all the documents, is surely misrepresenting it.

And yet Trump, from within the bubble of sycophants, clueless lawyers, and credulous reporters is blindly taking action in the hope of undercutting the pardon-proof plea deal of his campaign manager.

Update: Thanks to those who corrected my error in the bracketed description of the fourth plea.

As I disclosed in July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

The Problems with Richard Burr’s Claim that SSCI Has No Evidence of Collusion

Fresh off a really testy statement suggesting that he is one of just two acceptable gatekeepers on the question of whether Trump conspired with Russia, Richard Burr made some comments to the AP over the weekend suggesting his committee had not received any evidence of a conspiracy between Trump and Russia.

Burr said there is “no factual evidence today that we’ve received” on collusion or conspiracy between Russia and President Donald Trump’s campaign.

It’s a squishy statement that seems designed — particularly given Burr’s newfound lassitude about ending the inquiry and his stated worries of being accused of missing something in the future — to permit him to sustain a claim he hasn’t seen any conspiracy, at least through the election, without aggressively investigating for one.

“Nothing in this town stays classified or secret forever,” Burr said. “And at some point somebody’s going to go back and do a review. And I’d love not to be the one that chaired the committee when somebody says, ‘well, boy, you missed this.’ So we’ve tried to be pretty thorough in how we’ve done it.”

[snip]

Still, he says he doesn’t think the committee should rush to wrap up the work, saying “the worst thing we can do is to prematurely try to end” the probe.

Indeed, the rest of this article lays out plenty of evidence that Burr is not looking for evidence of a conspiracy. First, there’s the description of what his committee has been working on most recently:

For now, Burr says, the committee is preparing to put out two reports by the end of September: one on the Obama administration’s response to Russia’s election interference, and a second on Russia’s election meddling on social media. The committee is also expected to hold a hearing with Facebook COO Sheryl Sandberg and Twitter CEO Jack Dorsey in the first week of September.

Along with prior work and that laid out in that prior work, then, the Burr interview reveals that SSCI has been focused on:

  • A review of the January 2017 Intelligence Community Assessment
  • A report on election security vulnerability that barely mentions election vendor security
  • The planned report on Obama’s response to the Russian attack
  • The planned (and laudable) report on disinformation on social media
  • Per a bullet in the ICA report, “the contents of the [Steele dossier and its] handling by the United States Government “

These are all worthwhile topics (if you ignore the absence of a focus on vendors in the election security report). They’re just tangential to any question of conspiracy between Trump and Russia.

And on the one area where Burr does mention that conspiracy, he makes it clear he’s not going to work too hard to find out the truth.

“If the intent is to have a show trial, I’m not a participant,” Burr says on public hearings. He says “I don’t see a reason today” to bring back Donald Trump Jr., the president’s son, who participated in a meeting with a Russian lawyer at Trump Tower during the election.

At least at the House Intelligence Committee interview Don Jr had in December, the President’s son professed to not recall whether a call to a blocked number looped in his father on discussions about the June 9 meeting. And Mark Warner has made it clear that the committee did not ask Don Jr about a later meeting where  he proved willing to accept election assistance from foreign entities. Don Jr’s SJC testimony on that point is, by all appearances, a false statement to Congress. So the public record, at least, suggests that no committee has worked through the holes in Don Jr’s story — even ignoring some of the other questions remaining in the public record. Yet Burr likens chasing down those details to “a show trial.”

So, even with what’s in the public record, there’s significant reason to question whether Burr’s claim that “no factual evidence today that we’ve received” shows a conspiracy between Trump and Russia reflects any real effort to find out if there was one.

Plus, the article makes it clear that Burr doesn’t just demand that witnesses to the committee, but even other Senators, remain utterly silent about what the committee has been doing.

Sen. Jim Lankford of Oklahoma, who sits on the intelligence panel and is close to Burr, says Burr started every meeting at the beginning of the probe by asking senators not to talk to the media “until we get additional facts and we put things out together.”

While I greatly appreciate the need to keep the substance of some things the committee is doing a secret (indeed, I find that the committee doesn’t leak like a sieve refreshing), Burr’s public refusal to chase down the Don Jr story and his unwillingness to allow any public comment about what the committee is doing raise real questions about whether the committee would chase down evidence that would support a conspiracy case — even formerly public information still accessible to Congress, much less records requiring more of an effort to obtain — that might prove the same. Burr might worry just as much about someone, in the future, pointing to proof the committee chose not to chase down leads about a Trump-Russian conspiracy as his stated concern about someone pointing to something the committee missed.

“I know that from a committee’s integrity standpoint we’ve got to prove what we find. And if you can’t prove it then we can’t make the claim,” Burr said in the interview. But if his committee is not trying to prove that a conspiracy with Russia exists, then he should stop claiming that the committee has received no factual evidence that such a conspiracy exists. He would simply be unqualified to make the claim one way or another, and so should stop suggesting he would know if there were a conspiracy.

This is why I complained — before Burr made these comments — about his problematic epistemology, his insistence that he is one of just two gate-keepers on a claim about whether or not there has been collusion. Even the public record suggests no one in the committee can make such a claim.

As I disclosed last month, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

James Wolfe: The Distinction Between FBI’s Investigation of Leaking Classified versus Non-Public Information

There’s something about the James Wolfe case that has stuck with me. For an article published after Wolfe’s indictment was released, Ali Watkins’ lawyer, Mark MacDougall, tempered his concern about Watkins’ call records being seized by suggesting that the scope of charges might somehow legitimate it.

Watkins’ attorney, Mark MacDougall, had described the seizure as “disconcerting.”

“Whether it was really necessary here will depend on the nature of the investigation and the scope of any charges,” MacDougall said in a statement.

While MacDougall has gone silent since then, this comment suggested there might be a reasonable premise for DOJ to seize all of Watkins call records for her entire journalistic career, which is fairly shocking. FBI gets all the call records of someone, these days, to identify all the devices she uses to check that activity as much as they do so to identify specific calls made. There’s nothing revealed by the indictment that would justify that, and a lot (notably, the evidence they had ready access to Wolfe’s phone content) that suggests it wasn’t justified.

With that in mind, I want to look at some details about the known timeline of the investigation:

March 2017: Exec Branch provides SSCI “the Classified Document,” which includes both Secret and Top Secret information, with details pertaining to Page classified as Secret.

March 2, 2017: James Comey briefs HPSCI on counterintelligence investigations, with a briefing to SSCI at almost the same time.

March 17, 2017: 82 text messages between Wolfe and Watkins.

April 3, 2017: Watkins confirms that Carter Page is Male-1.

April 11, 2017: WaPo reports FBI obtained FISA order on Carter Page.

June 2017: End date of five communications with Reporter #1 via Wolfe’s SSCI email.

June 2017: Using pretext of serving as a source, CBP agent Jeffrey Rambo grills Watkins about her travel with Wolfe.

October 2017: Wolfe offers up to be anonymous source for Reporter #4 on Signal.

October 16, 2017: Wolfe Signals Reporter #3 about Page’s subepoena.

October 17, 2017: NBC reports Carter Page subpoena.

October 24, 2017: Wolfe informs Reporter #3 of timing of Page’s testimony.

October 30, 2017: FBI informs James Wolfe of investigation.

November 15, 2017: 90 days before DOJ informs Ali Watkins they’ve seized her call records.

December 14, 2017: FBI approaches Watkins about Wolfe.

Prior to December 15, 2017 interview: Wolfe writes text message to Watkins about his support for her career.

December 15, 2017: FBI interviews Wolfe.

February 13, 2018: DOJ informs Watkins they’ve seized her call records.

June 6, 2018: Senate votes to make official records available to DOJ.

That the Chairman and Vice Chairman of the Senate Select Committee on Intelligence, acting jointly, are authorized to provide to the United States Department of Justice copies of Committee records sought in connection with a pending investigation arising out of allegations of the unauthorized disclosure of information, except concerning matters for which a privilege should be asserted.

June 7, 2018: Grand jury indicts Wolfe.

June 7, 2018: Richard Burr and Mark Warner release a statement:

We are troubled to hear of the charges filed against a former member of the Committee staff. While the charges do not appear to include anything related to the mishandling of classified information, the Committee takes this matter extremely seriously. We were made aware of the investigation late last year, and have fully cooperated with the Federal Bureau of Investigation and the Department of Justice since then. Working through Senate Legal Counsel, and as noted in a Senate Resolution, the Committee has made certain official records available to the Justice Department.

June 13, 2018: Wolfe arraigned in DC. His lawyers move to prohibit claims he leaked classified information.

The indictment is quite clear: the investigation leading to Wolfe’s indictment started as an investigation into “multiple unauthorized disclosures of classified information” to the press. It’s clear from Burr and Warner’s statement that they were a bit surprised that the “charges do not appear to include anything related to the mishandling of classified information.” The indictment doesn’t charge Wolfe with leaking classified information.

And the timeline laid out in the indictment suggests that the document provided SSCI in March 2017 led to Watkins confirming that Page was Male-1 in the Victor Podobnyy complaint, the complaint itself is probably not classified. Nor would it, with its reference to Page as Male-1 (also used in this indictment!), be enough to ID Page as the guy Podobnyy was trying to recruit.

As I suggested in this post, for all the focus on Watkins, the indictment actually seemed to prioritize Reporter #1, including on the questionnaire the FBI gave Wolfe when they interviewed him in December. It first asked if Wolfe knew any of the reporters behind that still unidentified story, then asked a question that his relationship with Watkins would clearly refute, which agents contextualized even further by asking specific questions about details they had already confirmed about their relationship, including the international travel Rambo had identified as early as June. Then, after asking a question that would clearly pertain to Wolfe’s undeniable relationship with Watkins, the questionnaire asked whether he had given classified or unclassified documents to any of the journalists he might have admitted to contacting in Question 10, covering the basis for that Podobnyy story.

c. During the interview, FBI agents showed WOLFE a copy of a news article authored by three reporters, including REPORTER #1, about an individual (referred to herein as “MALE-l)”, that contained classified information that had been provided to the SSCI by the Executive Branch for official purposes.

d. Question 9 of the lnvestigative Questionnaire asked “Have you had any contact with” any of those three reporters. As to each reporter, WOLFE stated and checked “No.”

e. Question 10 of the Investigative Questionnaire asked, “Besides [the three named reporters], do you currently have or had any contact with any other reporters (professional, official, personal)?” Before answering this question, WOLFE stated orally to the FBI agents that although he had no official or professional contact with reporters, he saw reporters every day, and so to “feel comfortable” he would check “Yes.” He did so, and initialed this answer.

f. Question 10 of the Investigative Questionnaire further asked, “If yes, who and describe the relationship (professional, official, personal).” In the space provided, WOLFE hand wrote “Official – No” and “Professional – No.” WOLFE then orally volunteered that he certainly did not talk to reporters about anything SSCl-related. FBI agents orally asked WOLFE if he had traveled internationally with any reporter, gone to a baseball game or to the movies with a reporter, or had weekly or regular electronic communication with a reporter. To each question WOLFE verbally responded ‘No.” WOLFE then wrote “Personal – No” on the Investigative Questionnaire.

g. Question 11 of the lnvestigative Questionnaire asked, “If yes to question ten, did you discuss or disclose any official U.S. government information or documents whether classified or unclassified which is the property of the U.S. government without express authorization from the owner of the information?” WOLFE stated and checked “No” and initialed this answer.

Now consider the vote to release official SSCI documents to DOJ, which DOJ appears to have needed before they presented the indictment to the grand jury the next day, but which DOJ knew enough about to already be prepped to indict. That is, DOJ surely already knew what those records showed; what the vote did was permit DOJ to use the records in a prosecution. There are surely records pertaining to the SSCI SCIF that DOJ wanted, including the specific treatment of the Classified Document delivered to SSCI in March 2017.

On or about March 17,2017,the Classified Document was transported to the SSCI. As Director of Security, WOLFE received, maintained, and managed the Classified Document on behalf of the SSCI.

It’s also possible (though unlikely) that SSCI, and not the Executive Branch, counts as custodian of Wolfe’s Non-Disclosure Agreements.

But the only actual SSCI record described in the indictment is the email account he used to communicate with Reporter #1, as well as emails that Page sent to the committee to complain about leaks.

For example, between in or around December 2015 and in or around June 2017, WOLFE and REPORTER #1 communicated at least five times using his SSCI email account.

[snip]

26. On or about October 18, 2011, MALE-1 sent an email to the SSCI, complaining that the news organization had published REPORTER #3’s news article of the previous day, reporting that he had been subpoenaed.

27. On or about October 24,2017, at 7:00 a.m., WOLFE informed REPORTER #3, using Signal, that MALE-1 would testify in closed hearing before the SSCI “this week.” At 9:58 a.m., REPORTER #3 sent an email to MALE-I, asking him to confirm that he would be ‘paying a visit to Senate Intelligence staffers this week.” At 9:23 p.m., MALE-I sent an email to the SSCI, forwarding the email he had received from REPORTER #3, and complaining that the details of his appearance had been leaked to the press.

So it’s possible that, having had SSCI’s cooperation since the time FBI was interviewing Wolfe, DOJ only needed to ensure it could access these email records. It’s possible that DOJ believes convicting Wolfe of false statements charges, and avoiding the hassle of exposing classified information at a trial charging that he leaked classified information, is sufficient punishment.

Or it’s possible that this indictment is just the next step in an investigative process that aims to get confirmation — public or tacit, the latter obtained via a guilty plea with cooperation — regarding the source for that other, still unidentified story that incorporated classified information. I also think FBI may be particularly interested that Wolfe was approaching journalists offering to be a source, as he did in October with Reporter #4, and not vice-versa.

Gina Haspel’s Fluid Moral Compass

I expected to dislike Gina Haspel, but be impressed with her competence (the same view I always had about John Brennan). But she did not come off as competent in her confirmation hearing, in large part because the lies surrounding her career cannot be sustained.

Let’s start with the questions she didn’t answer (usually offering a non-responsive rehearsed answer instead). She refused to say:

  • Whether she believes, with the benefit of hindsight, torture was immoral.
  • If a terrorist tortured a CIA officer, whether that would be immoral.
  • Whether the torture program was consistent with American values.
  • Whether she oversaw the torture of Abd al Rahim al-Nashiri.
  • Whether she was in a role supervising torture before she became Jose Rodriguez’ Chief of Staff.
  • Whether she pushed to keep the torture program between 2005 and 2007 (see that question here).
  • Whether she would recuse from declassification decisions relating to her nomination.
  • Whether Dan Coats should oversee declassification decisions regarding her nomination.
  • Whether she has been alone with President Trump.
  • Whether she would tell Congress if he asked her for a loyalty oath.

She also answered that she didn’t think torture worked, but then hedged and said she couldn’t say that because we got evidence from it.

She did answer one question that went to the core of her abuse when she participated in the destruction of the torture tapes. She said she would consider it insubordination today if an officer bypassed her for something as substantive as destroying the tapes, as Jose Rodriguez did. But she as much as said she would have destroyed the tape much earlier, because of the security risk they posed to the officers who appeared in the videos.

Then there was the logical inconsistency of her presentation. Several Senators, including Mark Warner, Dianne Feinstein, Ron Wyden, and Kamala Harris, complained about the selective declassification of information surrounding her confirmation. Haspel explained that she had to abide by the rules of classification just like everyone else. Not only was that transparent bullshit on its face (as Harris noted, the CIA released a great deal of information that revealed details of her operations), during the course of the hearing she provided details about her first meeting with an asset, Jennifer Matthews’ life and assignments, and a counter-drug program that also must be classified, and yet she was willing to simply blurt them out.

Perhaps most remarkable, though, is a key claim she made to excuse the destruction of the torture tape.

She claimed she did not recall which of the long list of entities that opposed the destruction of the torture tape she knew about at the time. That includes a move by Carl Levin to form a congressional commission to investigate torture. But on several occasions, she said that because the torture was covered in cable traffic, no other evidence needed to be kept.

That assumes, of course, that both the specific CIA cable and CIA cables generally are a fair rendition of any event CIA does (it’s not; in this case, and some videos were destroyed before the reviews finding them to match).

But when the Senate Intelligence Committee did a 6.700 page report based on the cables CIA used to describe their own torture, CIA wailed because SSCI didn’t interview the individual officers. Haspel effectively suggested that cables, in the absence of the torture tapes, would be sufficient for a congressional commission. Yet when Congress used cables to do an investigation of torture, CIA then claimed that was invalid.

When asked whether torture was moral, Haspel instead repeatedly insisted she has a sound moral compass. Except what her testimony made clear is that her idea of moral compass has everything to do with what is good for the CIA and its officers. It has absolutely nothing to do with traditional moral values. That’s not actually surprising. That’s what we ask of clandestine CIA officers: to break the rules normal people adhere to, in the name of serving our country, and to remain absolutely loyal to those whose lives are exposed in doing so.

Except today, Haspel proved unable to move beyond the fluid moral compass of a CIA officer to adopt a more stringent moral code of an official serving a democracy.