Posts

In Lev Parnas Investigation, SDNY Decided that Ivana Trump Is Not Political

I really should be writing a responsible article describing, in detail, the three phases of the Lev Parnas investigation. But instead, I need to obsess about Ivana Trump.

There were, roughly speaking, three phases of the investigation into Parnas:

January through August 2019: Campaign Finance crimes

The first — which I laid out here — focused primarily on the campaign finance crimes. SDNY obtained two warrants in this period:

  • January 18, 2019, 19 MJ 1729: For Yahoo and Google content
  • May 16, 2019, 19 MJ 4784: For iCloud content

When DOJ did a search of Parnas and Fruman’s residences the day they were arrested, the only crime listed on the warrants were the campaign finance crimes; they did this to hide the scope of the ongoing investigation. SDNY only unsealed the Fruman warrant, not the Parnas one (nor warrants in other districts targeting their co-defendants).

August through December 2019: Foreign Agent suspicions

After the firing of Marie Yovanovitch, SDNY investigated whether all Lev Parnas and Igor Fruman’s influence-peddling served the interests of foreign principals — chiefly Ukrainian prosecutor Yuriy Lutsenko, but also other Ukrainians and maybe some Russians too.

SDNY obtained at least 8 warrants in this period (there are at least two, 19 MJ 7594 and 19 MJ 9830, which must be related — perhaps targeting their Russian backer, Andrey Muraviev? — but which SDNY withheld). And SDNY also withheld the November 2019 warrants targeting Rudy Giuliani.

  • August 14, 2019, 19 MJ 7593: Yahoo and Google content since January, with expanded focus
  • August 14, 2019, 19 MJ 7595: Existing Yahoo and Google content, with expanded focus
  • October 17, 2019, 19 MJ 7595: Actual authorization of the warrant approved in August
  • October 21, 2019, 19 MJ 9829: iCloud content since May
  • October 21, 2019, 19 MJ 9831: Devices from Dulles
  • October 21, 2019, 19 MJ 9832: Existing iCloud content for expanded focus
  • November 4, 2019: Warrants targeting Rudy
  • December 10, 2019, 19 MJ 11500: Stuff seized from residences for foreign agent focus
  • December 10, 2019, 19 MJ 11501: Instagram

As I’ll return to, it looks like Bill Barr intervened to halt SDNY’s expanding investigation even earlier than previously disclosed, in December 2019 rather than January 2020.

The only additional warrants SDNY served after December 10, 2019 in the foreign agent investigation was a warrant obtained in March 2020 because Fruman had not synced his iCloud with his phone until after SDNY obtained the May 2019 warrants, meaning some of the texts and chats he had already sent were not in the earlier warrant return.

  • March 20, 2020, 20 MJ 3074: iCloud content obtained with October 21, 2019 to cover earlier periods

Effectively, SDNY discovered that they had obtained content in October 2019 pertaining to events in 2018 and earlier in 2019 that hadn’t been available when they first got Fruman’s iCloud in May 2019, so they asked to use the October 2019 warrant for the earlier periods.

This may mean that Fruman, like Parnas, deleted some of his content on his phones.

December 2019 through March 2020: Fraud Guarantee fraud

Starting on December 12, 2019 — two days after the foreign agent investigation halted — SDNY spent several months trying to figure out what Fraud Guarantee actually was.

  • December 12, 2019, 19 MJ 11651: Google for longer period and expanded focus
  • January 21, 2020, 20 MJ 740: Existing email content for expanded focus
  • February 28, 2020, 20 MJ 2240: Google from creation date for Fraud Guarantee
  • February 28, 2020, 20 MJ 2241: Parnas iCloud for expanded focus

SDNY originally had believed, in 2018, that Fraud Guarantee was a recent creation, one serving as another means to launder political donations. But they had to keep digging further and further back, to 2012, to try to figure out what Fraud Guarantee really was.

The Instagram pivot

I’m still triple checking my own work, but SDNY appears not to have complied with SDNY’s order to release all this backup. In addition to withholding the warrant for the search of Lev Parnas’ residence on October 9, 2019 (though that’s likely to be nearly indistinguishable from the one used to search Fruman’s residence, which was obtained in the same docket), I don’t think they released the affidavit for the December 10, 2019 search of the devices seized at the residences for foreign agent crimes.

That’s the one that should have the most expansive description of the foreign agent investigation (and, I suspect, of the financing behind the effort to fire Marie Yovanovitch and obtain dirt on Hunter Biden, which I’ll return to). I suspect the affidavit is closer in content to the one used to seize Rudy’s email in November 2019 than what was unsealed the other day.

The Instagram warrant obtained that same day necessarily used a different affidavit, partly because it included all the crimes under investigation (broadly, the campaign finance crimes and the suspected foreign agent crimes), but also because it was looking for a different kind of information: mostly, but not entirely, photos that Parnas had posted.

But there’s something really weird about it, which has made me obsess about Ivana Trump.

The warrant suggests SDNY learned about the Instagram account from this WSJ video.

As you’ll note, WSJ describes that the oldest thing on the account was an April 2015 photo of a dog, then this photo, showing Parnas and co-defendant David Correia with Ivana Trump, at what he billed as a “Fraud Guarantee pow wow.”

As WSJ notes, the next things in Parnas’ Instagram account are photos showing him getting access to Trump from very early on in Trump’s campaign, in 2015 (as I’ll return to, Parnas’ 2016 access peddling is something that the warrants focus on more than the coverage of Parnas ever did). Then there’s a break in the Instagram account until summer 2018, when it returns to its focus on political access. The Instagram shows Parnas’ work with Rudy to dig up dirt on Hunter Biden and the 2016 election. It ends (again, per WSJ), with their trip days after the Perfect Phone Call to Madrid, to continue that effort.

SDNY obtained this warrant just two days before the investigation shifted focus to Fraud Guarantee. When they obtained the warrant, they undoubtedly had all the questions they spent the next two months pursuing.

Yet SDNY limited the temporal scope of this warrant to postings starting on October 1, 2015 — effectively excluding only the photo of the dog and some event with Ivana trump six months before Parnas started insinuating himself into Trump’s political orbit, one pertaining to Fraud Guarantee.

To the extent materials are dated, this warrant is limited to materials created between October 1, 2015, which is the month in which it appears Parnas first posted a photo related to a political event, to the present.

Did Ivana have some pre-existing relationship with Lev Parnas, one that dates to months before Lev started serially insinuating himself into Donald Trump’s orbit?

And if she did, why didn’t SDNY want that photo?

SDNY Obtained Warrant(s) for Foreign Agent Charges before John Demers Reviewed the Perfect Transcript

Had DOJ followed its own rules in 2019, Donald Trump’s “perfect phone call” with Volodymyr Zelenskyy should have been linked to the ongoing criminal investigation into Lev Parnas. Instead, DOJ limited the review of the criminal referral of the whisteblower complaint in such a way that prevented investigators from making that link. The Parnas warrants recently liberated by NYT reveal that failure was even more damning than previously known.

On August 14, 2019, CIA General Counsel Courtney Elwood told National Security Division head John Demers that someone in the CIA had expressed concerns about the July 25 call. The next day, on August 15, 2019, Demers went to the White House to review the transcript of it.

Mr. Eisenberg and Ms. Elwood both spoke on Aug. 14 to John Demers, the head of the Justice Department’s national security division, according to three people familiar with the discussion. Ms. Elwood did not pass on the name of the C.I.A. officer, which she did not know because his concerns were submitted anonymously.

The next day, Mr. Demers went to the White House to read the transcript of the call and assess whether to alert other senior law enforcement officials. The deputy attorney general, Jeffrey A. Rosen, and Brian A. Benczkowski, the head of the department’s criminal division, were soon looped in, according to two administration officials.

Department officials began to discuss the accusations and whether and how to follow up, and Attorney General William P. Barr learned of the allegations around that time, according to a person familiar with the matter. Although Mr. Barr was briefed, he did not oversee the discussions about how to proceed, the person said.

While DOJ was dawdling over what to do, on August 12, the whistleblower went to Intelligence Community Inspector General Michael Atkinson and filed a formal complaint. ODNI made a criminal referral at the end of August. And then DOJ declined, almost right away, to investigate.

Ms. Elwood and Mr. Eisenberg learned only later about the complaint, filed on Aug. 12, and did not know it was sent by the same officer who had sent the information anonymously to her.

At the end of August, the office of the director of national intelligence referred the allegations to the Justice Department as a possible criminal matter. Law enforcement officials ultimately declined to open an investigation.

I have always pointed out the problem with this tale. Since 9/11, DOJ’s expectation is that when investigators obtain a tip about anything that might pertain to national security, they run it against FBI holdings to see if there’s a known link to any existing investigation.

Had DOJ’s investigators scrutinized the OCCRP story about Lev Parnas and Igor Fruman cited three times in the complaint, had they done searches on all the identifiers implicated by reference in the complaint, they should have found the ongoing investigation into Parnas and Fruman at SDNY. (On review, even the unclassified part of the complaint mentioned people, like Andriy Telizhenko, who were likely the focus of intelligence scrutiny already, though perhaps not yet at FBI.)

But investigators didn’t get the complaint. According to a public confession Kerri Kupec made in September 2019, they got only the call transcript.

“In August, the Department of Justice was referred a matter relating to a letter the director national intelligence had received from the inspector general for the intelligence community regarding a purported whistleblower complaint. The inspector general’s letter cited a conversation between the president and Ukrainian President Zelensky as a potential violation of federal campaign finance law, while acknowledging that neither the inspector general nor the complainant had firsthand knowledge of the conversation,” Kupec said.

Relying on established procedures set forth in the justice manual, the department’s criminal division reviewed the official record of the call and determined based on the facts and applicable law that there was no campaign finance violence [sic] and that no further action was warranted. All relevant components of the department agreed with this legal conclusion, and the department has concluded this matter,” Kupec concluded. [my emphasis]

They didn’t assess the complaint. They assessed the transcript.

That was always a self-evidently corrupt decision — a decision that, if Bill Barr (who definitely knew of the Parnas and Fruman investigation) and Jeffrey Rosen (who likely did) were involved would be provably an effort to prevent investigators from tying the President to Parnas and Fruman.

But the timeline looks worse given something revealed in the warrants from the investigation liberated by the NYT last week.

The indictment used to arrest Parnas and Fruman on October 9, 2019 only charged them for campaign finance crimes: Conspiracy to violate campaign finance law by donating — including to Trump’s PAC and Pete Sessions — in the name of their front company Global Energy Partners, false statements to the FEC about the donation to Trump’s PAC, filing a materially false document to the FEC about the same, and conspiracy to make cannabis-related political donations using foreign money. The Russian source of those funds, Andrey Muraviev was not yet public. And while the donation to Pete Sessions was intimately connected to the firing of Marie Yovanovitch, that wasn’t mentioned in the first indictment.

What appeared in that indictment was consistent with the first two warrants obtained against Parnas and Fruman. The first, served on Google and Yahoo on January 18, 2019, sought evidence of those foreign and straw donor crimes, along with money laundering and fraud. It cited contacts with Sessions’ office, with Ron DeSantis, and even (regarding what the investigation would ultimately show pertained to Fraud Guarantee), Rudy Giuliani. But even in the discussions of Sessions, there was no mention yet of Yovanovitch.

That began to change in the second warrant, served on Apple for iCloud content on May 16, 2019, the first one after Bill Barr would have started getting briefings. That warrant remained focused on those foreign and straw donor crimes, though added false statements for Parnas and Fruman’s claims to the FEC about what they were up to. It added Muraviev to the inquiry. It took out a request to look for communications with individuals who work at “[redacted].”

That second warrant affidavit included a three page section focused on Parnas and Fruman’s recruitment of Pete Sessions to help get Marie Yovanovitch fired. The most striking thing about that second warrant is that SDNY obtained it the day after public notice of her removal, which development it noted in the warrnt. The warrant affidavit appears to have removed a reference to an email sent to Rudy the day after the Campaign Legal Center first disclosed the Parnas and Fruman grift (perhaps upon discovering that it pertained to Parnas’ effort to recruit Rudy into Fraud Guarantee). Still, there was no mention in that second warrant — the one obtained the day after Yovanovitch’s ouster was confirmed — of any foreign agent ties.

On August 14, presumably blissfully unaware of all the efforts to cover up Trump’s extortion attempt in DC, SDNY attempted to get at least two warrants, one requiring Yahoo and Google to provide new email content, everything generated since the January 18 warrant, and another asking for permission to examine the previously obtained content for new crimes. I phrase it that way for two reasons: First, because those warrants were docket number 19 MJ 7593 and 7595; there’s undoubtedly at least one more, 19 MJ 7594, targeting something or someone else (possibly either Muraviev or Pete Sessions). And while Magistrate Judge Henry Pitman approved the warrant permitting SDNY to examine already collected content for new crimes, they bolloxed it somehow. As SDNY explained in an October 17 letter to Judge Oetken,

[T]he Government is not presently able to locate a copy of the August 14 warrant itself, which may be the result of a clerical error, although it is possible a warrant was not submitted in connection with the August 14 application. As such, the Government respectfully requests that the Court review the attached agent affidavit, which was sworn before Judge Pitman on August 14, and issue the attached warrant which would authorize the Government to seize the materials sought in the August 14 application.

But they did get that warrant, 19 MJ 7593, which required Yahoo and Google to provide new content, content that would be scrutinized under SDNY’s expanded focus.

For the first time, SDNY asked for permission to review Parnas and Fruman’s communications for evidence that they or others were unregistered agents of a foreign power under either FARA or 18 USC 951. Those warrants also asked to look for evidence of bribery (a prong of the investigation that appears to have been dropped after interviewing Sessions in the wake of the Parnas and Fruman arrest).

Normally, by the time a US Attorney’s office contemplates such charges, they involve NSD. According to Geoffrey Berman’s book, before SDNY charged Parnas and Fruman, they got Public Integrity’s approval, at 4AM in the middle of the night! It’s certainly possible the “Sovereign District of New York,” as people jokingly describe SDNY’s notorious independence, did not. But it certainly raised the stakes on the tie between Parnas and Fruman and the President.

By the time John Demers reviewed the transcript of Trump’s call with Volodymyr Zelenskyy, the topic of his call had already been made a national security investigation.

Garrett Ziegler’s Landscaping Problem

According to emails posted at BidenLaptopEmails dot com made available by Garrett Ziegler, sometime around May 31, 2017, someone set a Google alert for weekly landscaping work, which usually took place in the mornings. Many weeks, Hunter Biden would receive a Google alert on Wednesday, reminding him landscapers would show up the next day. Then the next day, his iCloud email would email his RosemontSeneca email (hosted by Google) with a reminder.

In the depths of his addiction — again, per emails made available by Garrett Ziegler — the only emails that Hunter Biden “sent,” the only sign of life on his email accounts, was that email. For weeks on end, the only communication “from” Hunter is that eerie repetitive notice: “Alert – FYI landscapers at CBR (usually in AM).” It’s like that Google alert is a phantom, always there in Hunter’s email box.

I’m not sure the technical explanation for it — though I expect that experts would be able to use the nature of those weekly alerts to determine what inboxes were really used to load up the laptop that found its way to John Paul Mac Isaac and from there, on a hard drive, to Rudy Giuliani and then, another hard drive, to Garrett Ziegler. The technical explanation may also explain why the FBI relied on the laptop for Google alert information rather than the information the FBI received from Google itself, as I laid out here.

“Alert – FYI landscapers at CBR (usually in AM).” There must be over 150 versions of either the Google alert or the email from Hunter’s iCloud email to Hunter’s RosemontSeneca email in the collection made available by Garrett Ziegler.

In fact, those emails, “Alert – FYI landscapers at CBR (usually in AM),” may doom Ziegler’s effort to defeat Hunter Biden’s hacking lawsuit against him.

Ziegler filed his response, along with a sworn but not notarized declaration from Ziegler himself, yesterday.

As to the claim that he hacked Hunter Biden’s phone — which I’ve noted is a key vulnerability for Ziegler — Ziegler admits he used a password to access the backup from a phone Hunter allegedly owned in 2019.

19. Paragraph 29 falsely casts my comments to imply thta I and Defendant Marco Polo “hacked” into Plaintiff’s iPhone backup file.

20. In the case of the iPhone backup file referred to in paragraph 29, I received a copy of an iPhone backup file which existed as part of the copied files.

21. Also contained on the external hard drive given to me were files containing passcodes, which are essentially similar in function to passwords designed to allow access to password-protected files. Although it took months of examination, we were able to locate the passcode which allowed access to the iPhone backup file. Those files existed on the external hard drive when it was first given to me.

But he argues that because the disk drive he received from an associate of Rudy Giuliani had the password for the phone on it, and because Hunter never owned the hard drive on which Ziegler received both sets of data, he did not “hack” anything.

Plaintiff selectively cites to Defendant Ziegler’s December 2022 remarks about decrypting a specific file which stored the passcode to the iPhone backup file, both of which were on Defendants’ copy of the Laptop. (Compl. at ¶ 29). The Complaint falsely suggests Defendants “hacked” into Plaintiff’s iPhone backup. (Zeigler Decl. at ¶ 19). Defendants received a copy of Plaintiff’s iPhone backup file which existed as part of the files. (Id. at ¶ 20). When Defendants received the external hard drive, it contained passcodes, which allowed access to the iPhone backup file. (Id. at ¶ 21).

[snip]

Moreover, Plaintiff does not allege unlawful access to a computer within the meaning of the CFAA. A computer user “without authorization” is one who accesses a computer the user has no permission to access whatsoever—an “outside hacker[ ].” Van Buren v. United States, 141 S. Ct. 1648, 1658, (2021). Here, Plaintiff admitted that Defendants accessed and used a hard drive that Plaintiff never possessed. Specifically, Plaintiff alleges that Defendants accessed a hard drive provided by a third party which contains a copy (duplicates) of files. (Compl. at ¶ 18). Plaintiff does not allege that Defendants possessed or accessed Biden’s computer or original files.

Plaintiff alludes to his actual iPhone and iCloud account when he alleges that “at least some of the data that Defendants have accessed, tampered with, manipulated, damaged and copied without Plaintiff’s authorization or consent originally was stored on Plaintiff’s iPhone and backed-up to Plaintiff’s iCloud storage.” (Id. at ¶ 28). However, Plaintiff alleges no facts which demonstrate Defendants ever accessed any computer, storage, or service which Plaintiff either owns or has exclusive control over. Likewise, the Complaint also shows facts which conclusively prove that Defendants had no need to access any service or storage because the laptop copy in their possession admittedly contained all of the necessary information, including the passcode to view all of the files contained on the Biden Laptop regardless of encryption. (Id. at ¶ 18). Put simply, both the encrypted iPhone backup file and the passcode to open the iPhone backup file were on the Laptop copy.

Given that Hunter’s lawsuit also names a bunch of John Does, blaming his access to this backup on Rudy’s unnamed associate and Rudy and John Paul Mac Isaac may not help Ziegler.

In any case, Ziegler may hope he doesn’t have to rely on this argument. His response actually spends more time arguing that venue, in California, is improper than he does that using a password to access an encrypted backup is legal. The “work” Ziegler did to make ten years of Hunter Biden’s emails available took place in Illinois. He has no employees or board members in California. Fewer than 10% of Marco Polo’s supporters live in California (Ziegler doesn’t say what percentage of his donations they provide, however).

His venue argument and his hacking argument ignore a part of Hunter’s lawsuit, though, which alleges that Ziegler “directed illegal conduct to occur in California.”

Plaintiff is informed and believes that Defendant Ziegler intentionally directed illegal conduct to occur in California and has therefore subjected himself to jurisdiction in California.

Similarly, his response only mentions Hunter’s allegation that in addition to accessing that iPhone, he also accessed data in the cloud once.

Plaintiff accuses Defendants of “knowingly accessing and without permission taking and using data from” Plaintiff’s devices or “cloud” storage (Compl. at ¶¶ 40, 41), computer service (id. at ¶ 42), or protected computer (id. at ¶ 35) but fails to identify a single device Defendants accessed without authorization

That allegation is a key part of alleging that Ziegler broke the law in California.

40. Defendants have violated California Penal Code § 502(c)(1) by knowingly accessing and without permission taking and using data from Plaintiff’s devices or “cloud” storage, including but not limited to, Plaintiff’s encrypted iPhone backup to devise or execute a scheme to defraud or deceive, or to wrongfully obtain money, property, or data.

41. Defendants also have violated California Penal Code § 502(c)(2) by knowingly and without permission accessing, taking, copying, and making use of programs, data, and files from Plaintiff’s devices or “cloud” storage, including but not limited to, Plaintiff’s encrypted iPhone backup.

Ziegler denies accessing any computer in the possession of Hunter Biden. That falls short of denying that he hacked data owned by Hunter Biden.

22. Neither I nor any person associated with Marco Polo have accessed, or attempted to access, any computer, device, or system owned or controlled by Plaintiff. We are not hackers, we are simply publishers, and the Plaintiff is attempting to chill our First Amendment rights and harass us through a frivolous and vexatious lawsuit.

I think Ziegler has a problem with his description of where the iPhone backup came from in the first place: he says that the “laptop” was in Hunter Biden’s possession when the iPhone backup was saved to it on February 6, 2019.

The metadata concerning the duplicated iPhone backup file on our external hard drive indicates that the last backup made of the iPhone file to the plaintiff’s laptop, which he left at the repair show of John Paul Mac Isaac on April 12, 2019, occurred on February 6, 2019, while still in the plaintiff’s possession based upon all the facts known to me to be provably true beyond dispute.

Hunter may be able to prove that Ziegler, of all people, doesn’t believe that to be true, doesn’t believe that when that iPhone was backed up on February 6 — a day when someone presenting as Hunter was involved in a car accident in DC — Hunter was in possession of that laptop.

But the bigger problem Ziegler that has is that phantom landscaping reminder.

According to emails that Garrett Ziegler has made publicly available, an October 14, 2021 notice triggered by a Google alert was received on November 24, 2021, long past the time, per Ziegler’s declaration, he was in possession of this hard drive.

Again, I’m not sure how that happened technically. But if it involved either Apple servers or Google servers (or both, given that the notice was dated October 24, 2021), that would get you venue in California.

Hunter Biden may not have been in possession of Apple’s and Google’s servers in 2021, but accessing them using passwords stored on the hard drive — at least one password that Ziegler admits to using — would also constitute hacking.

Update, to answer a question below: The text of the email shows that the notice was October 14, but the email was received on November 24, 2021.

Rudy’s Seized Devices Were More Useful for Investigating January 6 than Marie Yovanovitch’s Firing

On April 28, 2021, the FBI seized up to 18 devices from Rudy Giuliani. On Tuesday, DOJ unsealed the affidavit behind that seizure.

The affidavit, read in conjunction with Barbara Jones’ Special Master reports, Rudy’s privilege log from the Ruby Freeman lawsuit, and a filing he submitted in that suit provide abundant evidence that the devices FBI seized on April 28, 2021 were more useful for investigating January 6 than any suspected FARA violations involved in the firing of Marie Yovanovitch.

And this goes well beyond Robert Costello’s claim that a number of the devices seized from Rudy were corrupted.

The affidavit, as written, was narrow: it only covered FARA violations tied to the role of Yuriy Lutsenko and other Ukranians in the firing of Ambassador Yovanovitch in spring 2019. While there is evidence cited in the affidavit from a broad period of time (for example, describing Rudy’s public admissions that he did certain things in early 2019 later that year), the last overt act described in the affidavit is of someone — probably Victoria Toensing — texting Rudy on May 9, 2019, complaining that people were asking about whether she had registered under FARA and denying that she had a client.

Remarkably, then, the affidavit asked for — and Judge Paul Oetken authorized — the authority to seize “any and all” devices at Rudy’s office and home almost two years after that last overt act.

Judge Oetken authorized that search and seizure even though one of the phones described in the affidavit — an Apple iPhone X that Rudy first started using on January 20, 2021 — could not possibly have been used in the suspected crime described in the affidavit. And three more of the devices described in it, including another iPhone, were only put in use later in 2019.

I’ve long argued that by September 2021, DOJ at least contemplated obtaining other warrants to access that content (because SDNY successfully argued to do the privilege review on all content that post-dated January 1, 2018). But given the scope of those devices, it looks likely that there was at least one other affidavit presented to Oetken in April 2021, one that would justify seizing those later devices.

This table shows (on the vertical axis) the devices that Rudy says were seized and (on the horizontal axis) the devices that FBI thought they’d find.

While Rudy’s own description of these devices (including the model number of the MacBook used in planning January 6, here listed as A22251) is as unreliable as everything else about him, the FBI didn’t find the two iPhone Xes — one used between January 8, 2018 and August 13, 2019, the other used between April 5 2018 and August 27, 2019, both marked in yellow above — that would have been Rudy’s primary phones during the events described in the affidavit.

Just three devices — two iPads and one iPhone 11 — clearly match the description of what the FBI expected to find.

All of them were, according to Rudy’s description (marked in the vertical “January 6 column”), among those used in planning January 6.

Whichever iPhone 11 they did find is almost certainly device that Special Master Jones labeled as device 1B05, the privilege review of which she described this way:

I next assigned for review the chats and messages that post-dated January 1, 2018 on Device 1B05, which is a cell phone. There were originally 25,481 such items, which later increased to 25,629 after a technical issue involving document attachments was identified. An initial release of non-designated items was made to the Government’s investigative team on November 11, 2021.1

Of the total documents assigned for review, Mr. Giuliani designated 96 items as privileged and/or highly personal. Of those 96 designated items, I agreed that 40 were privileged, Mr. Giuliani’s counsel withdrew the privilege designation over 19, and I found that 37 were not privileged. I shared these determinations with Mr. Giuliani’s counsel, and they indicated that they would not challenge my determination that the 37 items are not privileged. The 40 privileged documents have been withheld from the Government’s investigative team and the remaining 56 were released on January 19, 2022.

1 Additional non-designated items were released on January 19, 2022.

Those 25,000 chats were easily the most voluminous content turned over from any one device to the FBI. Of all the chats that Rudy attempted to withhold from that phone, he ultimately only succeeded in withholding 40 items. 40 chats or texts out of 25,000 total.

262 items in Rudy’s privilege log come from that phone. Another 127 come from a device, 1B09, also used to text about January 6 (including with Mark Meadows), which — given the date scope — must have been among the first devices Jones reviewed. That’s one possible source of a Ken Chesebro document included in the indictment but not identified in the January 6 Report.

And while Rudy withheld those documents from Ruby Freeman, since Jones only permitted Rudy to withhold 43 items total from DOJ, those must have been deemed non-privileged in the Special Master review. (I’ve noted before that there are easily 40 items that clearly relate to Rudy’s own lawyers.)

They were all turned over to DOJ, for use with whatever investigative teams had obtained warrants to access them, no later than January 21, 2022.

This is one thing Rudy accomplished by defaulting on discovery: Withholding from Ruby Freeman, and therefore from a public trial that would precede Republican primaries, documents that were turned over to DOJ in January 2022.

By April 2021 when — using warrants approved on Lisa Monaco’s first day on the job, but nevertheless a year after Bill Barr started obstructing this investigation — the FBI came looking for devices involved in Rudy’s suspected FARA violations tied to getting Marie Yovanovitch, they didn’t find the devices he would have been using at the time.

They did, however, find three devices on which Rudy planned January 6. And because of the way DOJ did the privilege review on those devices, those records would have been made available to any investigators with a lawful warrant no later than January 21, 2022.

Preliminary Comments on Rudy and Lev Warrants

In the last few months, NYT asked to and did liberate the warrants in the Lev Parnas investigation and the expansion of the investigation into Rudy Giuliani on Lisa Monaco’s first day on the job.

The Rudy warrants are very tidy. They include:

The Parnas warrants are a godawful mess — the digital equivalent of someone throwing 1,000 pages incorporating 30 or so documents on the floor, intermixing them all, thereby confusing where one document begins and the next ends. Here’s what just half look like: SDNY repeatedly split affidavits across multiple documents.

Bad words have been said in the Wheeler home today as a result.

Very bad words. And loudly.

For now, these two affidavits regarding Parnas provide a key introduction:

  • February 28, 2020: This warrant affidavit regarding Fraud Guarantee — the only ongoing investigation after Barr intervened to shut down any investigation into Rudy and after Parnas agreed to cooperate with impeachment — summarizes many if not all of the earlier warrants targeting Parnas.
  • December 10, 2019: This warrant, for Parnas’ Instagram account, is (for the moment) the most intact warrant describing the investigation as it was before Barr shut down any natural development. Temporally, it ends with a description of Trump’s perfect phone call with Volodymyr Zelenskyy.

I suspect the Parnas docket may look like it does to obscure what happened to the investigation when Barr intervened. Notably, while both sets of warrants make it clear that the Bidens were part of the project, there is much less focus on it in the Rudy warrants.

All that said, reviewing the Rudy affidavit, I have zero doubt — zero — that this affidavit was intended to obtain content for more than just the Foreign Agent investigation into Rudy. I was always confident that DOJ had set up that possibility (relatedly, former DOJ spox Anthony Coley pointed to this Politico story as proof that Garland nay-sayers have always been wrong), but there are several signs in this affidavit (which I’ll return to) that was the idea.

That said, as I reported, many of the devices seized with the Rudy warrant were corrupted, making them useless for any investigation.

Say Her Name: The Story of Ruby Freeman and Shaye Moss’ Vindication

After a jury awarded Ruby Freeman and her daughter $148 million for the intentional lies the former president’s former lawyer told about them in an attempt to steal an election, this is some of what Freeman had to say:

Good evening everyone. I am Lady Ruby. Today’s a good day. A jury stood witness to what Rudy Giuliani did to me and my daughter and held him accountable. And for that I’m thankful. Today is not the end of the road. We still have work to do. Rudy Giuliani was not the only one who spread lies about us, and others must be held accountable too. But that is tomorrow’s work. For now, I want people to understand this. Money will never solve all of my problems. I can never move back to the house that I called home. I will always have to be careful about where I go and who I choose to share my name with. I miss my home, I miss my neighbors, and I miss my name.

Freeman’s daughter, Shaye Moss, said this:

As we move forward, and continue to seek justice, our greatest wish is that no one — no election worker, or voter, or school board member, or anyone else — ever experiences anything like what we went through. You all matter and you are all important. We hope no one ever has to fight so hard just to get your name back.

For the women — vindicated by a jury of their peers, Rudy Giuliani’s peers, doing their civic duty — winning this substantial recognition of the damage done to them was about getting their name back.

The comments from the women said so much about the damage that Trump and Rudy’s bullying have done to the nation’s civic fiber.

But that’s not what led the coverage of their victory.

Rudy did.

Here’s how WaPo covered it.

WaPo first named Freeman and Moss in ¶3 of the story. The entire story quotes just 23 of their collective words after the verdict (though quotes or describes their testimony at more length, starting 24¶¶ into the story, after repeating Rudy’s false accusations about the women and the debunking presented at trial.

The damages verdict came in a defamation lawsuit filed against Giuliani, 79, by Fulton County, Ga., election workers Ruby Freeman and Wandrea ArShaye “Shaye” Moss, whom Trump and others on the former president’s campaign and legal teams falsely accused of manipulating the absentee ballot count in Atlanta.

“Today is a good day,” Freeman said, standing outside the courthouse with Moss after a jury awarded the mother and daughter pair $75 million in punitive and $73 million in compensatory damages for defamation and emotional distress.

[snip]

Their attorneys in closing arguments had urged jurors to “send a message” to Giuliani and others in public life that the “facts matter.” On Friday Moss added, “Giuliani was not the only one who spread lies about us, and others must be held accountable, too.”

By comparison, WaPo cited 58 words from Rudy’s post-verdict comments, with pushback on his claims that he hadn’t had a chance to present a case, but not on his comment that if the 2020 election weren’t exposed we wouldn’t have a country anymore.

Though the story described the verdict as a “potentially worrying sign for him as he faces criminal charges in Georgia accusing him of related efforts to overturn Biden’s victory there,” it didn’t talk about how some of the evidence Rudy withheld in discovery might have made that plight worse.

Here’s how Politico covered it (placed on the front page behind a 1,250-word story purporting to describe how impeachment will work, without mentioning there’s no evidence of wrongdoing).

Politico got the names of Ruby Freeman and Shaye Moss in the subhead and the second paragraph.

Politico sandwiched some of Freeman’s comments, 47 quoted words in ¶19, in-between two paragraphs — starting at ¶9 and in ¶24– quoting 49 words of Rudy’s comments.

A few minutes later, Giuliani stood outside the courthouse and declared, “I don’t regret a damn thing.”

The former mayor and federal prosecutor called the monetary award “absurd” and said he would appeal. He denied responsibility for the threats and harassment that Freeman and Moss received — including a bevy of unambiguously racist, violent messages — and said that he receives “comments like that every day.”

[snip]

“Today’s a good day. A jury stood witness to what Rudy Giuliani did to me and my daughter — and held him accountable,” Freeman told reporters after the verdict was delivered. “We still have work to do. Rudy Giuliani was not the only one who spread lies about us, and others must be held accountable, too,” she said, without elaborating.

[snip]

But after the verdict on Friday, Giuliani offered a different reason for declining to take the stand: “I believe the judge was threatening me with the strong possibility that I’d be held in contempt or that I’d even be put in jail,” he said.

Giuliani didn’t repeat his false claims about Freeman and Moss Friday, but continued to air false claims that the 2020 election was stolen. “My country had a president imposed on it by fraud,” he declared.

Rather than mentioning Moss’ tribute to other civil servants, Politico focused closely on tensions between Rudy and his attorney, Joe Sibley.

Even though the reporters on this story, Kyle Cheney and Josh Gerstein, provide some of the best coverage of all things January 6, the story didn’t mention that by blowing off discovery in this case, Rudy may have tried to keep evidence hidden from Jack Smith.

Like the other outlets, NYT’s story led with an image of Rudy.

But it focused paragraphs two through four on the women.

Judge Beryl A. Howell of the Federal District Court in Washington had already ruled that Mr. Giuliani had defamed the two workers, Ruby Freeman and Shaye Moss. The jury had been asked to decide only on the amount of the damages.

The jury awarded Ms. Freeman and Ms. Moss a combined $75 million in punitive damages. It also ordered Mr. Giuliani to pay compensatory damages of $16.2 million to Ms. Freeman and $16.9 million to Ms. Moss, as well as $20 million to each of them for emotional suffering.

“Today’s a good day,” Ms. Freeman told reporters after the jury delivered its determination. But she added that no amount of money would give her and her daughter back what they lost in the abuse they suffered after Mr. Giuliani falsely accused them of manipulating the vote count.

Because of that early focus, the dead tree version of today’s paper got Freeman’s name — and her declaration that it was a good day — on page A1 three times.

It closed with Freeman’s promise of more.

“Our greatest wish is that no election worker or voter or school board member or anyone else ever experiences anything like what we went through,” she said.

And while this is a an artificial measure, this NYT story also managed to quote more of Freeman’s speech — 31 words — than Rudy’s — 28. While it quoted Rudy attacking the verdict and standing by his lies, it did not repeat his other lies.

As with all the others, this story didn’t consider whether Rudy was protecting himself criminally by withholding related information in discovery.

I get that these measures are totally artificial. I mean this as observation, not criticism.

I get that Rudy is the famous one, Rudy makes this a tale of downfall. Even bmaz made this about Rudy, not the women who faced him down, Ruby Freeman and Shaye Moss.

But I was really really struck by how, even in their vindication, the heroism of what these women did, the heroism of election workers refusing to be bullied, still wasn’t the focus.

Lol, Rudy Tudy Is Moldy Fruity

Rudy had his lawyer promise to the jury that Rudy would testify and explain the truth.

Nope, he not only failed to personally testify, he put on no defense at all.

Mothers, don’t let your babies to ever grow up to be this stupid.

$148 million. Wow.

You all should get ready to learn about:

1) additur and remittitur.

2) Supersedeas bonds.

This was absolutely a damning verdict, and there is no way for Rudy to hide from it. Nor Trump, who will blithely act like he never knew Rudy.

Fun times, but there is a LOT ahead. Stay tuned.

Hunter Biden Twice Alleges that “Laptop” Data was “Stolen” from Him

Amid the shoddy coverage of Hunter Biden’s press conference and the impeachment vote yesterday, a detail got missed.

In both his press conference and in a motion to dismiss submitted Monday, Hunter alleged that “personal information … was stolen from me.”

James Comer, Jim Jordan, Jason Smith, and their colleagues have distorted the facts by cherry picking lines from a bank statement, manipulating texts I sent, editing the testimony of my friends and former business partners, and misstating personal information that was stolen from me. [my emphasis]

Some of the other false statements he accuses the GOP Chairmen of making are readily identifiable. For example, Abbe Lowell has scolded Smith for altering some WhatsApp texts several times. In the same Lowell letter, he complains about a misrepresentation Smith made from Rob Walker’s 302.

But it’s unclear what personal information Hunter is referencing.

In the motion to dismiss for selective and vindictive prosecution, Abbe Lowell is more clear about who — if not what — he’s discussing: It’s Rudy.

And just weeks before the 2020 presidential election, Mr. Giuliani obtained stolen electronic data from Mr. Biden and disseminated its purported contents (as well as manipulating some of it) in an attempt to create a media spectacle and undermine his President Biden’s political campaign. [my emphasis]

This is consistent with — though far stronger than — the allegation made in the lawsuit against Rudy and Robert Costello, that the men hacked his data. Rudy claims to be broke (and could be far broker once the Ruby Freeman jury, which is about to start deliberating, comes back), and is struggling to keep lawyers. Costello is not; I can’t assume Hunter would make this claim if he’s not prepared to back it up.

But if Lowell is alleging that Congress — which, best as I understand it, got a hard drive from “the laptop” from John Paul Mac Isaac — was “misstating personal information that was stolen from me,” it would not implicate Rudy. That version of the hard drive wouldn’t have gone through Rudy. It might implicate the blind computer repairman, though that claim is not part of Hunter’s countersuit of JPMI.

It could implicate the way in which the laptop was packaged up. The latter is where I’ve always suspected the potentially worst theft may have happened, but Hunter’s team has never alleged that publicly.

Whichever it is, Hunter’s evil Doppelganger Rudy has been wailing about “the laptop” at Ruby Freeman’s defamation trial. If Hunter’s team has more certainty about the way in which his data was stolen, that would be significant news.

Update: In the selective and vindictive prosecution motion, Hunter also said the dick pics were unlawfully obtained.

Setting a new low for the standards of decency in Congress, Rep. Marjorie Taylor Greene used an official Oversight Committee proceeding to gratuitously display blown-up sexually explicit and lewd photos—albeit unlawfully obtained—of Mr. Biden under a guise that fooled no one that her actions had something to do with “legislating.” 14

Hunter Biden Accused Rudy Giuliani of Hacking His Data, Not Defamation

Ruby Freeman and Shaye Moss’ civil trial against Rudy Giuliani goes to trial tomorrow.

In a number of the scene setters for the trial, people are making claims like this:

In addition to his criminal charges, disbarment proceedings and the lawsuit brought by Freeman and Moss, Giuliani has been sued by various other individuals — including President Joe Biden’s son Hunter — who claim he spread false allegations about them in 2020.

Or this:

He and one of his lawyers are being sued by Hunter Biden for allegedly mishandling the presidential son’s laptop,

Hunter Biden is not suing Robert Costello and Rudy Giuliani for defamation. He’s not suing Robert Costello and Rudy Giuliani for mishandling “his laptop,” which (even if John Paul Mac Isaac and Rudy Giuliani have told the truth about everything) would never have been in Rudy’s possession.

Hunter Biden is suing the former President’s former personal lawyer and that lawyer’s former personal lawyer for hacking his data. Hunter Biden is suing Rudy for violating the criminal Computer Fraud and Abuse Act: for accessing a computer without authorization or exceeding authorized access.

41. Defendants have violated the CFAA, specifically section 1030(a)(2)(C) of
the CFAA, by intentionally accessing a computer without authorization or exceeding
authorized access, and thereby obtaining information from any protected computer
which, pursuant to the CFAA, is a computer used in or affecting interstate commerce
or communication.

42. Defendants have violated the CFAA, specifically section 1030(a)(4) of the
CFAA, by knowingly and with intent to defraud, accessing a protected computer
without authorization or exceeding authorized access, and by means of such conduct
furthering the intended fraud and obtaining one or more things of value.

We will have to wait to see whether he can prove that claim. But particularly given that Hunter has since been charged with 12 criminal charges by a US Attorney appointed by Trump, let’s be clear what the claim is.

Hunter Biden has accused Rudy Giuliani of violating the criminal hacking statute.

One reason people make this mistake all the time — on top of the non-stop Fox News propaganda about this — is they think of the laptop like this:

The laptop, as it was brought to John Paul Mac Isaac’s shop, is better thought of like this.

There were dick pics on the laptop (I’m using artistic license in my choice of dick pics).

There were emails, including emails hosted by Google and emails tied to Hunter Biden’s iCloud account. But the laptop also included on it the means to get into Hunter’s iCloud account and at least some of his Google accounts.

There were other digital keys on the laptop and probably enough bank data to get into financial accounts.

And there was the contents of an iPhone, stored in encrypted form. As I’ve described, I first went down this rabbit hole — the entire Hunter Biden rabbit hole — when I read Gary Shapley’s description that the FBI needed a password to access some of the content, the content from the phone, on what was an actual laptop. That’s when I realized that anyone who accessed the encrypted contents of that phone without a warrant might be at risk for CFAA charges.

Several of the people who’ve been offering up Hunter Biden data confess, openly, that they broke the encryption on that phone.

In other words, no matter how all that stuff got put onto Hunter’s laptop, and no matter how it got brought to John Paul Mac Isaac’s shop, and no matter whether JPMI was perfectly in his legal rights to take possession of the laptop itself — all things that are very much contested — the laptop included the means to get into other data, data hosted in the cloud, to which neither JPMI nor anyone else had authorized access.

And then the blind computer repair man, after having chosen to copy that hard drive that, contrary to his claims was a removable hard drive, by cutting and pasting it and reading it along the way, packaged that all up on a hard drive and sent it, without Hunter’s consent, to the then-President’s lawyer.

We don’t know what kind of hard drive JPMI used — he said he constructed his own, to make it untraceable.

Instead of buying external drives from a local store, where the purchase might be traced back to me, or online, which also could be traced and moreover might lead to damage in transit, I built my own.

It took about a week to collect all the pieces and clone the drive from the store’s backup server. In essence, I created a copy that was as close to the original drive as possible.

As I have shown, at a time when Rudy says he (or Robert Costello) were in possession of that hard drive that had on it means to access several of Hunter’s cloud accounts, an email Hunter sent in 2016 was resent, showing some alterations.

Hunter Biden is not accusing Rudy Giuliani of saying things about him that aren’t true. Hunter Biden is accusing Rudy Giuliani of accessing data — whether on a hard drive copied from a laptop or in the cloud — to which he did not have legal access.

John Paul Mac Isaac’s Undisclosed Home Movie

If John Paul Mac Isaac, the legally blind computer repairman who claims Hunter Biden abandoned a laptop at his repair shop, had had his way — at least as he tells the story in his book — he would have obtained video of a single FBI agent sitting on the white couch in his living room, accepting printed copies of certain documents that, JPMI would have narrated for the camera, showed Mykola Zlochevsky in direct contact with senior people in the Obama Administration and implicated Ihor Kolomoyskyi in some vague way.

I printed out a few emails mentioning Ihor Kolomoyskyi. He was on the run with the lion’s share of the billions embezzled from the IMF and Ukraine. He would be the most dangerous person involved if he had an axe to grind. I also included emails from Mykola Zlochevsky and Vadym Pozharskyi showing their access to high levels of the Obama administration.

According to the timeline in JPMI’s book, that exchange would have taken place on November 19, 2019, just as Democrats prepared impeachment.

According to the timeline memorialized by Gary Shapley, however, that first in-person meeting between FBI agents and JPMI happened on November 7, 2019, before the first public impeachment hearing. The timing matters, somewhat, given that JPMI’s book claims his decision to share the “Hunter Biden” laptop with the FBI was a response to impeachment. Using the FBI timeline, it would have anticipated much of it.

More importantly, the discrepancy raises questions about why JPMI would focus on the emails he claims to have.

For example, there are only a few email threads mentioning Kolomoyskyi in the public set of emails from the drive. One is a thread from former Bush official Frank Mermoud passing on a piece about parliamentary maneuverings in Ukraine that mentioned Kolomoyskyi alongside Paul Manafort’s backer, Rinat Akhmetov. Another includes a discussion about how to respond to questions from reporter James Risen, to which Vadym Pozharskyi was adamant that, “The role of Igor Kolomoyskyi is often misunderstood. He has never been involved with Burisma and certainly is not today.” Risen wrote about the resulting story the day the whistleblower transcript was released in September 2019. Hunter Biden was included on both threads, but did not comment. Hunter received a third email via BCC: a link to a New Yorker story about efforts to reform Ukraine after Maidan.

Those are the kind of emails that JPMI would have handed to the FBI on camera, as if they were a smoking gun.

I’m not aware there are any threads from Zlochevsky. There are, of course, a ton about him involving Pozharskyi. And Pozharskyi’s the one who came closest to having any contacts directly with Obama officials, including Hunter’s father. But three years after NYPost published what has been deemed one of the most damning emails, in which Pozharskyi thanked Hunter for, “inviting me to DC and giving an opportunity to meet your father,” the best explanation for the “meeting” is that the Burisma executive attended a World Food Program dinner to which then-Vice President Biden stopped in, ostensibly to visit another attendee. The discussion, per Devon Archer, was about food security, not gas deals.

Nevertheless, JPMI describes that he told the FBI that the emails he had printed out showed Kolomoyskyi, along with Zlochevsky, using Hunter and his business partner to protect their stolen billions.

“This is information about Ihor Kolomoyskyi and Mykola Zlochevsky, and their involvement in using Hunter and Devon to protect the billions they embezzled from the IMF. I am afraid they would silence me for what I know,” I explained, sliding the paperwork across the table toward the two agents.

In other words, had JPMI’s set-up worked, the video showing the handoff would have been far more scandalous than the emails themselves have proven to be, particularly if it had come out just as Democrats moved to impeach Trump for demanding dirt on Hunter Biden. And it would have focused far more closely on Kolomoyskyi than the laptop contents justified.

It would have done what Republicans, to this day, demand should have happened: public notice that the “laptop was real.” It still doesn’t matter what is on that damn thing: it’s a shiny object, just like John Podesta’s risotto recipe, and Republicans know that’s all their followers need.

This was JPMI’s self-described plan for sharing the laptop with the FBI: It wasn’t so much that he wanted to hand off the laptop. He wanted to create a video of the FBI accepting paper copies that he claimed were something they weren’t.

As JPMI describes it, his plans to create such a video failed because, first of all, FBI agents always travel in twos, in part to ensure there are always two witnesses to conversations like this. One of the two agents coming to interview JPMI noticed and pointed to the camera the computer repairman had just installed in advance of the interview, so both agents chose to sit in a smaller loveseat, leaving JPMI facing his own camera.

I shut the door behind them and then closed the second, interior door. I saw Agent DeMeo point to the camera on the shelf, and the two sat down on the loveseat.

“Not a great start,” I thought, sitting on the couch facing the camera.

To my knowledge, such video has never been publicly released, perhaps because the agents also declined to take the documents with them when they left. But JPMI’s claim to have taken video, while it may explain the clarity with which he remembers telling the FBI he had documents implicating Hunter Biden in helping Kolomoyskyi, “protect the billions [he] embezzled from the IMF,” raises still more questions about the discrepancy between his timeline and FBI’s.

I reviewed JPMI’s description of his attempt to film the FBI agents as they picked up emails that don’t say what JPMI claimed they did, along with the discrepancies between JPMI’s claimed timeline and FBI’s, after I revisited how Rudy’s alleged efforts to extort legal relief for dirt transpired. That piece showed that Rudy’s efforts to find dirt — in 2019, ostensibly a year before JPMI first contacted him — parallel the JPMI timeline in interesting ways.

Rudy’s public, failed attempt to obtain dirt from Kolomoyskyi makes JPMI’s inexplicable treatment of the one-time Volodymyr Zelenskyy funder, to whose corruption JPMI dedicates a 3-page description elsewhere in his book, more interesting. Kolomoyskyi’s role in events leading up to impeachment is real. Lev Parnas has receipts from his trip to Israel in a failed bid to extort dirt from Kolomoyskyi, after which Rudy called out Kolomoyskyi publicly.

But there’s no reason for Kolomoyskyi to be in JPMI’s book, especially given JPMI’s admission, when trying to disclaim responsibility for the money laundering case number that appeared on the subpoena, that Hunter had no role in Kolomoyskyi’s corruption.

Agent DeMeo was based in Baltimore, but he’d never said anything about money laundering. The only discussion about anything remotely close to money laundering revolved around Ihor Kolomoyskyi and his Delaware assets. I remember discussing that, but it hadn’t involved Hunter Biden.

Whatever emails he printed out would have done little to substantiate the specific corruption claims he, by his own telling, made to the FBI. But JPMI claims that he tried to put them in his video as a prop anyway.

The first time I examined discrepancies between JPMI’s story and the one memorialized by Shapley, I had noted how a shift in JPMI’s timeline served to support his explanation that he shared the laptop with the FBI in response to impeachment. He described packaging up specific emails from the laptop to excuse Trump’s call with Volodymyr Zelenskyy (JPMI dates his own trolling of the laptop to this WaPo article, just days before the perfect phone call).

And of course I included the smoking gun, the one that could put an immediate end to this bogus impeachment: the initial email outlining Devon and Hunter’s plan to use Vice President Biden as the centerpiece of their plan to tap into the billions Burisma had to offer. The shady business dealings I had witnessed on the laptop, in my opinion, justified President Trump’s phone call with Zelenskyy.

But as I’ve focused more closely since, a more interesting discrepancy is that JPMI claims his father first reached out to the FBI on October 9 — around seven hours before Lev Parnas was arrested on his way to get a laptop in Vienna — whereas the FBI claims it happened on October 16, a week later. Normally, you’d trust the FBI’s timeline over JPMI’s.

But the blind computer repairman claims to have written Rudy a letter, the night before his father planned to go to the FBI. In the letter, JPMI explained his plan, in case anything bad happened. JPMI describes packaging this up on October 8 and giving it to a friend, Kristin, for safekeeping.

My father called the next morning. His plan was to visit the FBI field office in Albuquerque around 10 a.m. the next day.

From there on out, I would have to be extra careful. After his visit, people beyond those we trusted would know of the laptop’s existence, introducing a whole new element of potential danger. For my safety net, I had to make sure to write Rudy Giuliani an attention-getting letter. I definitely didn’t want to come off as a nutjob or conspiracy junkie. The letter would have to be clear and to the point, explaining my actions leading up to my father’s FBI interaction without revealing his identity. I wanted to focus on my reasons for not trusting the FBI as well as my expectations for what could happen. More important, I wanted to let Giuliani know why, if he were reading the letter, I would need his help. Here’s what I came up with.

Rudolph Giuliani

Giuliani Security and Safety

Sir,

If you have received this letter, I am in need of your help. Last April 12, Hunter Biden came into my Mac repair shop in Wilmington, Delaware, requesting data recovery from 3 of his laptops. I was able to check in the one working Mac and accomplished a data recovery. He has failed to return to pay or collect the recovered data or his laptop. As the events of the summer unfolded, and after the shop’s 90 day abandonment policy expired, I decided to poke around and look to see if there was anything topical on his drive. I discovered enough information that I no longer felt comfortable being in possession of his data and laptop. I decided that I wanted to turn over everything I have to the FBI or local police, but a major concern was what if compromised FBI or local police intercepted the data and destroyed it, preventing it from ending up in the hands of someone who can use it. I could not risk contacting anyone local so I mailed a copy of the drive out of state to a trusted person who would contact the FBI on Wednesday, October 9, and if trustworthy FBI were contacted, they were instructed to collect the laptop and data from my shop discreetly. If you are reading this letter, it means the compromised FBI has collected the laptop, data and possibly me. I have included a flash drive with some emails and files recovered from his laptop that could be useful in your investigation. If I am in the compromised FBI’s custody, it means that there are still members of the FBI who are working to protect a former Vice-President and silence those who provide proof to his corruption. I need your help, not just to get out of custody, but also to bring to light what has happened. I have included a full copy of the laptop on an external drive. You will need a Mac to access it.

Thank you for your time and help.

John Paul Mac Isaac [my emphasis]

According to this timeline, JPMI asked Kristin if she was willing to hold a copy of the drive sometime between September 24 and October 8. Then he wrote and printed out the letter on October 8, the day before his father would go to the FBI. After 7PM that day, he packaged up the drive, the letter, and “a flash drive consisting of documents summarizing the Bidens’ criminal activity” in a 5″X7″ padded envelope, and walked the package out to Kristin’s house in a residential area of Wilmington.

In August 2020, after JPMI reached out to Rudy and then spoke with Robert Costello, there were (per his book anyway), three versions of the hard drive, on top of what he had given the FBI: A copy he had kept and made a bunch of notes on, a copy in his uncle’s possession, and the copy he had given to Kristen for safe keeping — a copy that should have been in an envelope with a thumb drive with documents saved almost a year before.

That last drive is the one he sent to Robert Costello.

“Let me tell you about the Department of Justice,” Bob said. “When Rudy and I returned from Ukraine last year, we submitted over two hundred subpoena requests to the district attorney, and not a single one has been filed. Do you know what the term ‘slow walking’ means?” I said no.

“It’s when they deliberately drag their asses to delay or even prevent a case from moving forward,” he supplied. “That’s what the DOJ is doing to us, and that is what the FBI is doing to you. How quickly can you get me a copy of the drive?”

“I can drop something in the mail for you tomorrow.”

“Let me call you back in a few minutes,” Bob said. “Will you be around?” I said yes, and we hung up.

That wasn’t so bad! I had their attention, and it felt like I was talking to the right person. At this point I realized I needed a copy of the drive. My copy had all my notes, and because of this I felt it would be considered tampered with. My uncle Ron had the copy that originally had been in my father’s possession. That was too far away.

Then I smiled, remembering that the other copy I’d made back then had ended up with Kristen, and she was to hand-deliver it to Rudy Giuliani if all else failed. It was kind of funny that I could have saved myself nearly a year if I had just gone to him in the first place.

Bob called me back, and we agreed I would FedEx the drive to him the next day.

[snip]

When we hung up, I dialed Kristen.

She answered quickly. “Is everything OK?” she asked. “What’s wrong?”

“Everything is OK,” I said, then amended that: “I think everything is going to be OK. I hope it’s not too late. I need to come over and grab something.”

August 28, 2020

I dropped the drive off at FedEx the next morning on my walk to work. It was done. The drive was on its way to the lawyer of the president. My work was done; I’d seen it through to the end.

Unless he repackaged it, the flash drive would have been sent along with the hard drive.

That flash drive with a few documents on it is one of the best explanations for the metadata on the documents shared with NYPost a year later. One, of a detailed email Hunter wrote about how Burisma should navigate the likely election of Poroshenko which noted Vice President Biden’s upcoming trip but which also recorded Hunter stating, “they need to know in no uncertain terms that we will not and cannot intervene directly with domestic policy makers, and that we need to abide by FARA and any other US laws in the strictest sense across the board,” has metadata reflecting a creation data on September 28, 2019, right in the period where, JPMI describes, he and his father were developing their plan.

Another document published by NYPost on October 14, 2020, an email in which Vadym Pozharskyi emailed Devon Archer and Hunter asking them to “use your influence to convey a message / signal, etc to stop using what we consider politically motivated actions” to prosecute Burisma (which led to a real effort to intervene on their part, albeit one carried out through paid lobbyists), has metadata showing a creation date of October 10, 2019 — after JPMI says he had already dropped off an envelope that would remain untouched for almost a year.

There are a bunch of other possible explanations for this metadata. But according to JPMI’s book, there would be documents saved to flash drive on or before October 8, then packaged up for a year.

But not after October 10.

True, JPMI accessed a similar set of emails again in the subsequent weeks, in preparation for his staged meeting with the FBI. But he describes those exclusively as printouts.

Ultimately, these are just weeds, inconsistent metadata that could either reflect sloppiness or could be intentional manipulation.

But they provide an interesting background to inconsistencies in the rest of JPMI’s story.