Trump’s DC Trial Strategies, Helsinki, and Dumb and Dumber

After Trump was indicted in DC, the speculation — informed and otherwise — went to his possible defense strategies. “Delay delay delay” was an early one, following his increasingly successful efforts to do so in the Mar-a-Lago case before Judge Cannon. Judge Chutkan, however, is no Judge Cannon, and she has been pushing hard to move things along briskly. Trump sycophants have been putting some trial balloons out there, to see what might fly with the base, if not with the court, such as cries of “Free Speech!” and “First Amendment!” which pointed to a possible defense strategy. Another was the claim that Trump was relying on the advice of counsel, and thereby cannot be held liable.

That last one I found rather  . . . what’s the correct legal term of art? Oh yes . . . silly.

White House Counsel Pat Cippolone told Trump that his claims of fraud were silly. He was more polite about it, but that’s what his advice boiled down to. Trump’s AG, DAG, Acting AG, head of OLC, and numerous other lawyers at the DOJ told Trump that his claims of fraud were silly. Christopher Krebs, a lawyer and the first head of the Cybersecurity and Infrastructure Security Agency at DHS told Trump that his claims of fraud were silly for multiple reasons. DNI John Ratcliffe (per Cassidy Hutchinson) said Trump’s claims were silly and dangerous.

But apparently the advice of all these lawyers he appointed to positions in his own administration wasn’t enough for Trump, because Rudy et al. said all these lawyers were wrong.

Out in the states, there were other lawyers weighing in, too. Ryan Germany, the general counsel to Georgia Secretary of State Brad Raffensperger, told him that his claims about fraud in Georgia were silly. Some of Trump’s own lawyers in Pennsylvania and Arizona withdrew from representing Trump before the courts in their states, which is a strong sign that their client would not listen to them and take their advice that his claims were silly. Then more of his PA lawyers did the same. Even the lawyers who stayed on to represent Trump in these election cases told the judges in their cases that Trump’s claims of fraud were silly, as there was no evidence to back up those claims.

But apparently the advice of all these lawyers wasn’t enough for Trump, either.

Which brings us to the judges. State judges and federal judges. Trial judges and appellate judges. The justices of the Supreme Court of the United States. In more than five dozen separate cases, the rulings issued by all these courts said that as a matter of law, Trump’s claims were silly. Let’s let US Judge Matthew Brann of the Middle District of Pennsylvania speak for the all lawyers who wear the black robes, who passed judgment on one or more of Trump’s claims. As Brann wrote in the Introduction to his ruling in DONALD J. TRUMP FOR PRESIDENT, INC., et al. v. KATHY BOOCKVAR, et al.:

In this action, the Trump Campaign and the Individual Plaintiffs (collectively, the “Plaintiffs”) seek to discard millions of votes legally cast by Pennsylvanians from all corners – from Greene County to Pike County, and everywhere in between. In other words, Plaintiffs ask this Court to disenfranchise almost seven million voters. This Court has been unable to find any case in which a plaintiff has sought such a drastic remedy in the contest of an election, in terms of the sheer volume of votes asked to be invalidated. One might expect that when seeking such a startling outcome, a plaintiff would come formidably armed with compelling legal arguments and factual proof of rampant corruption, such that this Court would have no option but to regrettably grant the proposed injunctive relief despite the impact it would have on such a large group of citizens.

That has not happened. Instead, this Court has been presented with strained legal arguments without merit and speculative accusations, unpled in the operative complaint and unsupported by evidence. In the United States of America, this cannot justify the disenfranchisement of a single voter, let alone all the voters of its sixth most populated state. Our people, laws, and institutions demand more. At bottom, Plaintiffs have failed to meet their burden to state a claim upon which relief may be granted. Therefore, I grant Defendants’ motions and dismiss Plaintiffs’ action with prejudice.

Short Judge Brann: Mr. Trump, you’re being silly. Go away, and don’t bring this crap into my courtroom again.

So back to the case before Judge Chutkan. If Trump’s team tries to raise the “reliance on the advice of counsel” defense, I would hope that Jack Smith and his team would run through the list of each one of the Trump administration lawyers who told Trump his claims were silly, and each one of the judges who ruled that as a matter of law, these claims were silly, and ask whoever is representing Trump one simple question: how many MORE lawyers need to tell Trump he’s wrong before he accepts their conclusions?

Which brings me to the final question asked at Trump’s infamous July 2018 press conference alongside Vladimir Putin in Helsinki.

Jonathan Lemire: Thank you. A question for each President. President Trump, you first. Just now, President Putin denied having anything to do with the election interference in 2016. Every U.S. intelligence agency has concluded that Russia did. What – who – my first question for you, sir, is, who do you believe? My second question is, would you now, with the whole world watching, tell President Putin – would you denounce what happened in 2016? And would you warn him to never do it again?

Donald J. Trump: So let me just say that we have two thoughts. You have groups that are wondering why the FBI never took the server. Why haven’t they taken the server? Why was the FBI told to leave the office of the Democratic National Committee? I’ve been wondering that. I’ve been asking that for months and months, and I’ve been tweeting it out and calling it out on social media. Where is the server? I want to know, where is the server? And what is the server saying? With that being said, all I can do is ask the question. My people came to me – Dan Coats came to me and some others – they said they think it’s Russia. I have President Putin; he just said it’s not Russia.

I don’t see any reason why it would be, but I really do want to see the server. But I have – I have confidence in both parties. I really believe that this will probably go on for a while, but I don’t think it can go on without finding out what happened to the server. What happened to the servers of the Pakistani gentleman that worked on the DNC? Where are those servers? They’re missing. Where are they? What happened to Hillary Clinton’s emails? Thirty-three thousand emails gone – just gone. I think, in Russia, they wouldn’t be gone so easily. I think it’s a disgrace that we can’t get Hillary Clinton’s 33,000 emails. So I have great confidence in my intelligence people, but I will tell you that President Putin was extremely strong and powerful in his denial today. And what he did is an incredible offer; he offered to have the people working on the case come and work with their investigators with respect to the 12 people. I think that’s an incredible offer. Okay? Thank you.

Given a choice between believing the conclusions of every US intelligence agency on Russian interference in the 2016 election on the one hand and the extremely strong and powerful denial by the leader of Russia on the other, Trump chose Putin.

Can you see why Helsinki came to my mind?

Trump has a pattern when it comes to getting advice from others, that revolves around two immutable statements:

  1. Trump wants advice that supports his current thinking, OR advice that will provide him some kind of immediate or future benefit.
  2. Trump does NOT want advice that tells him he is wrong about something, that he lost a court case or election, or that he otherwise failed.

When confronted by failure, Trump will seize on anything that suggests even the slimmest possibility of ultimate success.

Again, look at Helsinki. Sure, the unanimous conclusion of the US intelligence community was that Russia meddled in the 2016 election, but if Trump accepted that conclusion in public, while standing next to Putin, any hope Trump had of a grand Trump Tower Moscow (something he had worked on for years) would be gone. Also, if Putin held some kind of compromising information on Trump (a conclusion that Marcy leaned toward in her post on the press conference), Putin would surely release it. The result of backing the US IC would be immediate harm and future failure for Trump. Not good.

Would this loss and damage be outweighed by some other benefit, like being seen as the heroic leader of the US intelligence community? Hardly. In Trump’s eyes, these were Deep State folks who were out to get him, and even if he accepted their advice, they’d never accept him as their leader, and he’d piss off his other supporters who had been backing him against the IC. Also not good. Thus, Trump’s answer to Lemire’s question was simple: I believe Putin.

Faced with a mountain of evidence against him, either in Helsinki or in courtrooms across the country, Trump will always reject the advice of those who say definitively that he has lost and cling for his life to the advice of whomever tells him otherwise. Trump lives by the immortal line of Lloyd Christmas: “So you’re telling me there’s a chance . . . Yeah!”

Trump is not seeking out folks like Rudy “Four Seasons Total Landscaping” Giuliani, Sidney “Release the Kracken!” Powell, or any of his other lawyers to guide his legal strategy. He keeps them around because they keep telling him that there’s a chance.

Spoiler alert for Trump and anyone who hasn’t seen Dumb and Dumber: Lloyd’s 1 in a million chance did not come through for him, and he didn’t get the girl.

 

 

How Many Podunk Local DAs Ought to Arrogate Themselves Federal Election Police?

For anybody that has read me here, or followed me on Twitter, you know I have maintained from the start that Fani Willis, and her “investigation” is a complete joke.

Have also maintained the Trump conspiracy actions in Arizona were as bad as Georgia, if not worse.

Apparently the national media has caught on to what informed Arizonans have known from the start.

Arizona Governor Doug Ducey was hit up by Trump (so was the then Secretary of State).

So, why is the ladder climbing Fani Willis the only local DA trying to enforce federal election law, much less her completely bogus RICO posit?

There are now people in Arizona clamoring for this horse manure. Thanks to Fani Willis and her self serving showboating garbage.

Fulton County, where Fani Willis is the local DA, has approximately 1.1 million county residents. Maricopa County, where all significant acts in AZ occurred, has nearly 5 million.

So, should every pissant local county prosecutor arrogate upon themselves to control and charge federal election crimes?

No. Nor should local AGs. Leave this to the Feds.

Things are getting just absurd.

How the Government Proved Their Case against John Podesta’s Hacker

We’re almost seven years past the hack of the DNC, and self-imagined contrarians are still clinging to conspiracy theories about the attribution of that and related hacks. In recent weeks, both Matt Taibbi and Jeff Gerth dodged questions about the attribution showing Russia’s role in the hack-and-leak by saying that the Mueller indictment of twelve GRU officers would never be tested in court (even while, especially in Gerth’s case, relying on unsubstantiated claims in John Durham indictments from his two failed prosecutions).

And while’s it’s likely true that DOJ will never extradite any of those twelve men to stand trial, DOJ did successfully convict one of their co-conspirators on a different hack: the hack-and-trade conspiracy involving Vladimir Klyushin and accused John Podesta hacker, Ivan [Y]Ermakov.

(The Mueller indictment and Ermakov’s second US indictment, for hacking anti-doping agencies, transliterated his name with a Y, the Boston one does not.)

That trial provides a way to show how DOJ would prove the 2018 indictment if one of the twelve men charged ever wandered into a jurisdiction with an extradition treaty with the US.

As laid out at trial, between 2018 and 2020, the co-conspirators hacked two securities filing agencies, Toppan Merrill and Donnelly Financial, to obtain earnings statements in advance of their filing, then traded based off advance knowledge of earnings. Klyushin was one of seven people (two charged in a separate indictment, three who were clients of Klyushin’s company M-13) who did the trading. Ermakov didn’t trade under his own name. He may have been compensated for Klyushin’s side of the trades with a Moscow home and a Porsche. But at least as early as May 9, 2018, forensic evidence introduced at trial shows, an IP address at which Ermakov’s iTunes account had just gotten updates was used to steal some of the filings.

Ermakov did not show up in a courtroom in Boston to stand trial and Klyushin has launched a challenge to his conviction that rests entirely on a challenge to venue there. But the jury did convict Klyushin on the hacking charge along with the trading charges, meaning a jury has now found DOJ proved Ermakov’s hacking beyond a reasonable doubt.

And they did it using the same kind of evidence cited in the Mueller indictment.

The crime scene

Start with the crime scene: the servers of the two filing agencies victimized in the hack-and-trade, Toppan Merrill and Donnelly Financial.

According to the trial record, neither figured out they had been hacked on their own. As the FBI had tried to do for months beforehand in the case of the DNC, a government agency, the SEC, had to tell them about it. The SEC had seen a number of Russians making big, improbable stock trades from clients of the two filing agencies, all in the same direction, and wanted to know why. So it sent subpoenas to both companies.

As the DNC did with CrowdStrike in 2016, both filing agencies hired an outside incident response contractor — Kroll Cyber in the case of Toppan Merrill, Ankura in the case of Donnelly Financial — to conduct an investigation.

The lead investigators from those two contractors were the first witnesses at trial. Each explained how they had been brought in in 2019 and described what they found as they began investigating the available logs, which went back six months, a year, and two years, depending on the type and company. The witness from Kroll described finding signs of hacking in Toppan Merrill’s logs:

The Ankura witness described how they first found the account of employee Julie Soma had been compromised, then used the IP addresses associated with that compromise to find other employees whose accounts were used to download reports or other unauthorized activity.

In sum, the two incident response witnesses described providing the FBI with the forensic details of their investigation — precisely the same thing that CrowdStrike provided to FBI from the DNC hack. There’s not even evidence that they shared a full image of the filing agencies’ servers (though an FBI agent described going back to Donnelly to search for the domain names behind the intrusions that Kroll had found at Toppan Merrill), which was one of the first conspiracy theories about the DNC hack Republicans championed: that the FBI failed to adequately investigate the DNC hack because it didn’t insist on seizing the actual victim servers during the middle of an election.

The forensic evidence wasn’t the only evidence submitted at trial from the crime scene. One after another of the employees whose credentials had been misused testified. Each described why they normally accessed customer records, if at all, how and when they would normally access such records, and from what locations they might access corporate servers remotely, including their use of the corporate VPN. Julie Soma — the Donnelly employee whose credentials were used most often to download customer filings — described that she would never have done what was done in this case, download one after another filing from Donnelly customers in alphabetical order.

Q. Would you ever go from client to client and alphabetically access those types of documents?

A. No.

Both interview records from the Mueller investigation (one, two, three) and documents from the Michael Sussmann case show that the FBI did similar interviews in the DNC hack. The Douglass Mackey trial, too, featured witnesses describing how the Hillary campaign identified that attack on the campaign as well.

In proving their case against John Podesta’s hacker, DOJ presented witness testimony that eliminated insiders as the culprit.

Fingerprinting

Having established the forensic data tied to intruders through the incident response contractors, prosecutors then called FBI agents as witnesses to describe how — largely through the use of IP addresses obtained using subpoenas or pen registers and the materials found in the suspects’ iCloud accounts — they tied Klyushin’s company, M-13, to both the hacking and the trading.

The trading was fairly easy: the co-conspirators accessed the two online brokers used to execute the trades under their own names and from IP addresses tied to M-13. An SEC witness described in detail how trades always shortly followed hacks but preceded the public filing of earnings statements.

Tying M-13 to the hacking took a few more steps.

For the hacking conducted via the domains Kroll identified, the FBI first found the account that registered the domains. Each was registered under a different name, but each of the names were based on a Latvian-based email service and used similar naming conventions. Each had been accessed from the same set of 3 IP addresses.

For IPs that Kroll identified, the FBI found BitLaunch servers created by an account in the name of Andrea Neumann, which was controlled from one of the same IP addresses that had registered the domain names. The FBI got search warrants to obtain images of those BitLaunch servers.

Another IP address used to steal filings, several FBI agents explained, was from an Italian-run VPN, AirVPN. The FBI used a pen register to show that someone accessed AirVPN from the M-13 IP address during the same period when the AirVPN IP was stealing records from the filing companies. The FBI also showed that Klyushin had accessed his bank at the same time from that same IP address. The FBI also showed that eight common IP addresses had accessed Ermakov’s iTunes account and the AirVPN IP address (in this case, the access was not at the same time because the FBI only had a pen register on the VPN for two months in 2020). While FBI witnesses couldn’t show that the specific activity tied to an AirVPN IP at the victim companies tied back to M-13, they did show that both Klyushin and Ermakov routinely used AirVPN.

Plus there were the filing thefts — noted above — that were done on May 9, 2018 using the same IP address that, four minutes earlier, had downloaded an Apple update from Ermakov’s iTunes account. As I’ve noted repeatedly, before Ermakov was first indicted by Mueller, he had already left a smoking gun in the servers at Donnelly in the form of IP activity that the FBI obtained over a year later inside the US.

In fact, much of the evidence used to prove this case (particularly establishing the close relationship between the conspirators) came from Apple, including WhatsApp chats saved in Klyushin and other co-conspirators’ iCloud accounts. We know Mueller used the same source of evidence. In March of this year, emails stolen by hacktivists revealed, Apple informed another of the GRU officers charged in the DNC hack that the FBI had obtained material from his Apple account in April 2018, in advance of the Mueller indictment.

The indictment likely also relied on warrants served on Google, especially on Ermakov’s account. The Mueller indictment (as well as the later anti-doping one) attributes much of the reconnaissance conducted in advance of the hacks to Ermakov: the names of some victims; information on the DNC, the Democratic Party, and Hillary; how to use PowerShell (which would be used against Toppan Merrill); and CrowdStrike’s reporting on GRU tools. If he did this research via Google, it would all be accessible with a warrant served on the US tech company.

The getaway car

One pervasive conspiracy theory about the Mueller indictment stems from testimony that Shawn Henry gave to the House Intelligence Committee in December 2017, describing that Crowdstrike did not see the data exfiltrated from the DNC servers. Denialists claim that is proof that the information was never exfiltrated by the GRU hackers. The conspiracy theory is ridiculous in any case, since there were so many other Russian hacks involving so many other servers, including servers run by Google and Amazon that had a different kind of visibility on the hack (something that Henry alluded to in his testimony), and since the indictment describes that the DNC hackers destroyed logs to cover their tracks.

But the Klyushin trial featured testimony about a tool used in the hack-and-trade conspiracy that has a parallel in the DNC hack: the AMS panel, hidden behind an overseas middle server, which the Mueller indictment described this way:

X-Agent malware implanted on the DCCC network transmitted information from the victims’ computers to a GRU-leased server located in Arizona. The Conspirators referred to this server as their “AMS” panel. KOZACHEK, MALYSHEV, and their co-conspirators logged into the AMS panel to use X-Agent’s keylog and screenshot functions in the course of monitoring and surveilling activity on the DCCC computers. The keylog function allowed the Conspirators to capture keystrokes entered by DCCC employees. The screenshot function allowed the Conspirators to take pictures of the DCCC employees’ computer screens.

[snip]

On or about April 19, 2016, KOZACHEK, YERSHOV, and their co-conspirators remotely configured an overseas computer to relay communications between X-Agent malware and the AMS panel and then tested X-Agent’s ability to connect to this computer. The Conspirators referred to this computer as a “middle server.” The middle server acted as a proxy to obscure the connection between malware at the DCCC and the Conspirators’ AMS panel. On or about April 20, 2016, the Conspirators directed X-Agent malware on the DCCC computers to connect to this middle server and receive directions from the Conspirators.

[snip]

For example, on or about April 22, 2016, the Conspirators compressed gigabytes of data from DNC computers, including opposition research. The Conspirators later moved the compressed DNC data using X-Tunnel to a GRU-leased computer located in Illinois.

In the hack-and-trade conspiracy, the hackers set up a similar structure, using the servers given names like “developingcloud” and “finshopland” as reverse proxies, with a final server behind them all executing orders on the hacked servers at Toppan Merrill (and the implication is, Donnelly, though the forensics came from Toppan Merrill via Kroll). The “computers numbered 1 through 7” in what follows are the servers identified by Kroll stealing earnings filings from Toppan Merrill.

A. So this is a digital depiction of the servers that I examined on the right there, so they each have a number on them, 1 through 9.

Q. Let me focus you first on the computers numbered 1 through 7. Do you see them there?

A. Yes.

Q. Are they kind of in a sideways V configuration?

A. Yes.

Q. Okay. And what do computers 1 through 7 show on this Exhibit DDD?

A. They functioned as gatekeepers for the furthest machine to the right, server number 8.

Q. And when you say “gatekeeper,” is there a technical term for that?

A. Yes. So the technical term is a “reverse proxy.”

Q. Can you explain to the jury, in a easy for me to understand way, what a reverse proxy or gatekeeper is in this chart, 1 through 7.

A. Yes. So in this chart, it would function — so the seven that are in that V formation, they would pass traffic to server number 8, if it was coming from an infected machine; and if it was something else, it would send the traffic to some other website.

This structure would have made it impossible for Toppan Merrill to understand the source or function of the anomalous traffic on its servers because any attempt to do so would be redirected away from the control server.

But not the FBI, because they obtained images of the servers with a warrant.

The forensic witness describing this structure showed, command by command, that the forensic clues identified by Kroll on the Toppan Merrill servers were controlled via that final server running PowerShell (the same tool that Mueller alleged Ermakov researched during the DNC hacks in 2016).

Q. And is there something on this log that you found that tells you the name of the program that was running on the victim’s computer at Toppan Merrill?

A. Yes, the process name line, and that reads rdtevc.

Q. And is process another name for computer program?

A. Yes.

Q. So this is a log that shows that a program named RDTEVC was running on a Toppan Merrill computer, right?

A. Yes.

Q. But it’s stored in the hacker computer?

[snip]

Q. And what does PowerShell do? You can call it anything, right? You can call it RDTEVC?

A. That’s probably a randomly chosen name.

Q. But no matter what it’s called, what does it do?

A. So it allows it to be remotely controlled and accessed.

Q. Allows what to be remotely controlled and accessed?

A. The infected machine.

The same forensic expert explained that he didn’t find any downloads of stolen files.

But he also explained why.

He had also found secure tunnels, readily available but similar in function to a proprietary GRU tool Crowdstrike found in the DNC server. As he described, these would be used to transfer data in encrypted form, making it impossible to identify the content of the data while it was in transit.

Q. Mr. Uitto, are you familiar with the concept of exfiltration?

A. Yes.

Q. Big word, but what does it mean?

A. It means to steal data, take data.

Q. And in your review, did you find evidence — you told Mr. Nemtsev you didn’t find evidence of the taking of data from the victim computers to these particular hacker servers; is that right?

A. That’s right, but I did see secure tunnels that were created.

Q. So when you say there were secure tunnels, were you able to tell what was going through those secure tunnels?

A. No.

Q. Those were encrypted, right?

A. Yes.

Q. So you actually don’t know whether or not there was financial information in those tunnels?

A. That’s correct.

Q. Or sports scores or anything?

A. That’s correct.

Q. It’s encrypted.

A. Yes.

[snip]

Q. What role does encryption serve in this hacker architecture?

[snip]

A. Yes, so it can be used to hide data or information.

Q. So if it’s encrypted, we can’t know what’s being passed?

To prove the hack, you would have to — and FBI did, in both cases — prove that the stolen data made it to the end point.

This testimony is important for more than explaining where you’d need to look to find proof of a hack (at the end points). It shows the import of understanding not just the crime scene and those end points, but the infrastructure used to control the hack and exfiltrate the data. With both the hack-and-trade conspiracy and the hack of the DNC, the FBI got forensics about the victim from the incident response contractors, but they obtained the data from these external servers directly, with warrants.

The denialists looking for proof in the DNC server were focused on just the crime scene, but not what I’ve likened to a getaway car, one to which the FBI had direct access but Crowdstrike did not.

Follow the money

Another specialized kind of fingerprint prosecutors used to prove the case against Klyushin parallels the one in the Mueller indictment (and, really, virtually all hacking cases these days): the cryptocurrency trail. As the Mueller indictment explained, the hackers who targeted the DNC used the same cryptocurrency account to pay for different parts of their infrastructure, thereby showing they were all related.

The funds used to pay for the dcleaks.com domain originated from an account at an online cryptocurrency service that the Conspirators also used to fund the lease of a virtual private server registered with the operational email account [email protected]. The dirbinsaabol email account was also used to register the john356gh URL-shortening account used by LUKASHEV to spearphish the Clinton Campaign chairman and other campaign-related individuals.

[snip]

For example, between on or about March 14, 2016 and April 28, 2016, the Conspirators used the same pool of bitcoin funds to purchase a virtual private network (“VPN”) account and to lease a server in Malaysia. In or around June 2016, the Conspirators used the Malaysian server to host the dcleaks.com website. On or about July 6, 2016, the Conspirators used the VPN to log into the @Guccifer_2 Twitter account. The Conspirators opened that VPN account from the same server that was also used to register malicious domains for the hacking of the DCCC and DNC networks.

By following the money, prosecutors were able to show the jury how these pieces of infrastructure fit together.

In the case of the hack-and-trade, the conspirators did nothing fancy to launder the cryptocurrency used in the operation. The servers obtained in the name of Andrea Neumann were paid using three successive cryptocurrency accounts, each with different names but accessed from the same IP address. The third name was Wan Connie. An interlocked Wan Connie email account had been accessed from M-13’s IP address. So while the cryptocurrency itself couldn’t tie the conspirators to the hack, the interlocked infrastructure did.

The conspiracy

To prove the hack, prosecutors at trial showed how the FBI had used evidence from the crime scene, the “getaway” car, the money trail, and evidence obtained at the end point from iCloud accounts to tie the hack back to Ermakov personally and M-13 more generally. The biggest smoking gun came from matching the IP addresses to which Ermakov got his iTunes updates to the infrastructure used in the hack (or, in the case of the May 9, 2018 thefts, directly to someone exploiting Julie Soma’s stolen credentials.

All that was left in the Klyushin case was proving the conspiracy, showing that Klyushin and others had used this stolen information to make millions by trading in advance of earnings announcements. This would be the functional equivalent of tying the records stolen from Democrats (and some Republicans) to their release via Guccifer 2.0, dcleaks, and WikiLeaks.

At Klyushin’s trial, the government proved the conspiracy via two means: an SEC analyst presented a bunch of coma-inducing analysis showing how the trades attributed to online brokerage accounts that Klyushin and others had in their own names lined up with the thefts. The analyst explained that odds of seeing those trading patterns would be virtually impossible.

More spectacularly, prosecutors introduced Klyushin’s role with a bunch of pictures establishing that he was “besties” with Ermakov (and, eventually, that there were unencrypted and encrypted communications, along with a picture of Klyushin’s yacht, sent via Ermkaov to two guys in St. Petersburg who didn’t work for M-13 but who were making the same pattern of trades); I looked at some of that evidence here. One picture found in Klyushin’s account showed Ermakov, crashed on a chair, wearing an M-13 sticker, taken in the same period as some of the logs provided by Kroll showed hacking activity. About the only thing the FBI found in Ermakov’s iCloud account was the online brokerage account used to execute the insider trading, in Klyushin’s name, but that tied him to the trading side of the conspiracy.

As their trades began to attract attention, Ermakov and another M-13 employee attempted to craft cover stories, evidence of which prosecutors found via Apple. Prosecutors even introduced Threema chats in which Ermakov told Klyushin, his boss, not to share details about their trading clients or he might end up a defendant in a trial.

He did.

And at that trial, prosecutors were able to prove a hacking conspiracy against Klyushin using evidence and victim testimony from the crime scene, but also from other data readily available with a subpoena or warrant inside the US.

Update: Tweaked language describing secure tunnels.

Did Robert Costello Inadvertently Provide New Evidence against Defendant-1?

In a press conference after Defendant-1’s arraignment yesterday, Alvin Bragg explained that he reconsidered bringing this case because new information — both newly available witness(es) and evidence — had come to him that change the way he thought of the case.

The witnesses may be one or both of Kellyanne Conway or Hope Hicks, both of whom testified to the grand jury, both of whom will have backed Michael Cohen’s claims about what went down in 2016.

The new evidence may be something from Trump’s taxes (the statement of facts briefly notes that “the participants
also took steps that mischaracterized, for tax purposes” the hush money payments) or something that came out of the Trump Organization trial last year.

But I can’t help but wonder whether, in his attempt to stave off a Trump indictment last month, Robert Costello provided new information to Bragg.

I say that because one of the only new details in the statement of facts is that, after writing Cohen on April 20, 2018 to reassure him that he had “friends in high places” (which made the Mueller Report and was also included in the SOF), Costello emailed Cohen again on June 14, 2018, urging him not to plead again. This email is not included in the Mueller Report.

On or about June 14, 2018, Lawyer C emailed Lawyer A a news clip discussing the possibility of Lawyer A cooperating, and continued to urge him not to cooperate with law enforcement, writing, “The whole objective of this exercise by the [federal prosecutors] is to drain you, emotionally and financially, until you reach a point that you see them as your only means to salvation.” In the same email , Lawyer C, wrote, “You are making a very big mistake if you believe the stories these ‘journalists’ are writing about you. They want you to cave. They want you to fail. They do not want you to persevere and succeed.”

In hubristic interviews after his testimony to the grand jury — which he claimed to be sure would stave off an indictment — Costello described that prosecutors were narrowly focused on six emails he provided them, rather than a whole binder of emails that, Costello claimed, would totally discredit Cohen as a witness (but not Kellyanne, Hope Hicks, or David Pecker, which is a testament to the limits of his understanding of the case).

Presumably, this email is one of the ones they focused on.

If Costello’s attempt to stave off the indictment actually hastened it, it wouldn’t be the first time. Costello had two exchanges with federal prosecutors (and FBI agents) in a November 2021 attempt to stave off Steve Bannon’s indictment for contempt. Prosecutors treated him as a witness. Among the other damning things he told them is that he advised Bannon to BEWARE because he could be referred for prosecution if he totally blew off the subpoena from the January 6 Committee. He also made it clear that Bannon did not have an explicit executive privilege invocation.

It would be especially remarkable if Costello provided Bragg with emails that he previously didn’t have, because that might mean that Cohen didn’t have everything accessible himself. It might mean DOJ didn’t consider all the evidence about Costello’s attempt to influence Cohen’s testimony.

And in this case, there can be no misunderstanding that he will be treated as a witness. Trump sent Costello as a witness, his witness. His testimony is now locked in.

That testimony necessarily covers one of the only previously unpublished details in the entire narrative. Costello himself may be one of the new witnesses.

Release the Kraken: Fox News’ Revolving Sidney Powell Conspiracy Theory Door

It does Dominion Systems no good, in their defamation lawsuit against Fox News and Fox Corporation, to prove that Sidney Powell was a long-time Fox News commentator. They are suing Fox for defamation based on Fox’ platforming of Sidney Powell after the time the Murdoch outlet had internally recognized her as a bullshit artist, not during the time when she routinely showed up to lie about another topic — Mike Flynn’s innocence.

That explains why that prehistory, the long period when Powell was just another personality on Fox News, doesn’t appear in Dominion’s motion for summary judgement or its response to Fox’s MSJ.

What appears, instead, are two inflammatory claims which — taken together — may be as important as the billion dollar lawsuit and the sordid truth about Fox that Dominion has aired as part of it.

First, as Dominion lays out in response to Fox’s attempt to blame Trump for all the outrageous false claims about Dominion, Fox started it,

Fox went beyond the claims that Rudy Giuliani made in court, and Fox aired Sidney Powell’s false claims before she made those claims in court (which is one reason why, Dominion argues, Fox can’t simply claim they were covering newsworthy lawsuits).

Dominion lays out a timeline showing that Powell didn’t make any of the allegedly defamatory claims again Dominion in court until November 25, after Fox had floated them in 12 of the claimed instances of defamation.

As Giuliani himself told the court in one Pennsylvania lawsuit brought by the campaign, the lawsuit is not a fraud case. See Donald J. Trump for President,Inc.v.Sec’y ofPennsylvania,830 Fed.Appx. 377,382 ( Cir. 2020). Or to quote the headline of a November 23,2020 Wall Street Journal article: “Trump Cries Voter Fraud. In Court, His Lawyers Don’t.” Ex.702. Only Powell’s lawsuits, the earliest of which was filed on November 25 (after she had been disavowed by the Trump campaign), made allegations along the lines of the defamatory statements accused in this case allegations that Fox had been broadcasting for weeks before Powell’slawsuits were filed.9

The facts about the cases Fox focuses on are as follows:

November 7: The Trump campaign files an Arizona election challenge alleging defects in the ballots and poll worker deviation from protocols, not a technological failure of vote tabulation machines. See generally Ex.C1. Dominion is not mentioned.

November 11: The Trump campaign files a challenge to results in Antrim County. The gravamen of the complaint is interference with Republican election observers, disputes about voter eligibility, and ballots being run through tabulating machines multiple times–not mechanical tabulation errors. See Ex.C227-60. The complaint concedes that the Secretary of State found that the Antrim error was a result of the failure of a county clerk to properly update media drives, and does not allege any intentional misconduct by Dominion. See id. 60-62.

November 13: Lin Wood files a Georgia election contest, challenging certain changes in Georgia’s election laws. See Ex.C425-50. The lawsuit was not filed on behalf of the President or his campaign, nor does it make any misconduct allegations against Dominion or even mention Dominion by name.

November 17: Lin Wood files an affidavit in his Georgia lawsuit alleging certain misconduct by Smartmatic (not Dominion). The affidavit was irrelevant to the subject matter of the underlying suit, and was never filed in any case brought by the Trump campaign. Ex.C5.

November 25: More than two weeks after Fox first gave her a platform to promote her conspiracy theories, and days after the campaign expressly disavowed her, Powell files lawsuits in Georgia and Michigan. These lawsuits parrot the lies amplified by Powell and others on Fox. Exs.C8-C9.

December 1& 2: Powell files two more lawsuits in Wisconsin and Arizona–repeating the false allegations against Dominion. Exs.C11-C12. [italics my emphasis]

More importantly, Dominion lays out that Fox had Powell on to float these allegedly defamatory claims before Trump embraced them. Dominion suggests that having Trump embrace them was part of luring Trump back to the network.

It is also belied by the record for at least four reasons :(1) President Trump followed lead, making the same allegations against Dominion only after Fox had made them; (2) Sidney Powell was not on the President’s legal team when she started making the Dominion allegations and was disavowed after being associated with that team for at most 8 days; (3)Powell received some of her information via Fox hosts,who then laundered the lies by hosting her on their shows; and (4) neither Trump nor his campaign ever filed a lawsuit alleging the at-issue statements.

First, Fox’s own recitation of the timeline of Trump tweets establishes that Fox went first, Trump went second. On November 7, 2020, President Trump retweeted a report of Georgia using the same machines as Antrim County. Ex.G6. Notably Trump did not name Dominion, and certainly did not accuse Dominion of participating in an election-rigging conspiracy. The Trump campaign then filed a lawsuit on November 11 regarding the events in Antrim County that merely asserted there had been a “glitch” in the Dominion software. Ex.C2 . It was not until November 12 that Trump first made any allegations about Dominion intentionally switching votes, which he did via a tweet crediting OAN’s reporting. See Ex.G6 p.3. Though this tweet refers to OAN, it demonstrated Trump could be pulled back to Fox–provided the network broadcast what he wanted to hear. Indeed, later that same day, Trump tweeted his approval of Fox hosts attacking Dominion, telling his followers that they “[m]ust see @seanhannity takedown of the horrible, inaccurate and anything but secure Dominion Voting System which is used in States where tens of thousands of votes were stolen from us and given to Biden. Likewise, the great @LouDobbs has a confirming and powerful piece!” Ex.683. From here on out, Trump had Dominion in his sights.

Dominion argues that what got Trump to start attacking Dominion was seeing Fox focus on the claims of fraud; it suggests Fox was airing those claims of fraud to appease Trump.

What changed between November 7 and November 12? Fox entered the fray. Specifically, on November 8 Maria Bartiromo brought Powell onto her show to air the false claim that Dominion machines used an algorithm to calculate the votes that they would need to flip. Ex.A2 p.15. The Fox platform gave Powell the stamp of credibility, and reach, needed to spread the lies about Dominion. And while Trump was widely known to be a voracious consumer of Fox, Bartiromo did not leave anything to chance. [three lines redacted]

These redacted lines suggest that Bartiromo spoke with the Trump campaign directly to highlight these false claims; in the earlier filing, Bartiromo told Powell, “I just spoke to Eric [Trump] & told him you have very imp[ortant] info.” In that same reference, the filing revealed that Bartiromo “also provided information directly to Powell,” suggested that Bartiromo was a go-between between Powell and the campaign.

But that’s not the craziest part.

The crazy part — which is only clear from reading both Dominion’s recent filings — is that Fox got Trump to disavow Sidney Powell.

Remember how this looked in real time. After the embarrassing Four Seasons Total Landscaping press conference, the campaign publicly distanced itself from Powell on November 22.

Here’s the explanation offered by Maggie Haberman at the time.

According to Dominion, however, after Powell came after Tucker Carlson, Raj Shah — who used to work as a spox in Trump’s White House — inquired about her status with Trump. He learned two days before Rudy made a show of publicly ousting her from the campaign that she never worked for the campaign.

Second, Fox ignores what it knew better than the public at the time: Powell was never officially on the Trump campaign’s legal team, having never signed an engagement agreement. Ex.605, Shah 246 :4-12; id. 273:11-20. When Fox was finally motivated to get to the bottom of the relationship between Powell and Trump (which only happened after Powell came after one of Fox’s own, Tucker Carlson), it took Fox but a day or so to get the truth. See, e.g.,infra pp.163-164.

[snip]

Shah believed the Decision Desk got the Arizona call right (see,e.g.,Ex.725);that the November 19,2020,press conference featuring Sidney Powell and Rudy Giuliani was not credible ,including the claims about Dominion (see, e.g., Ex.605 , Shah 214 :21-215 :7); see also Ex.726 ( crazy fucking presser );and that Sidney Powell was generally nuts (Ex.727).

Yet Shah did nothing when on or around November 20,2020, he learned that Sidney Powell never had a retention agreement with Trump or his campaign. This was explosive news. For several weeks Shah’s network had been airing false allegations from Powell, in part, so they say now, because she was the President’s lawyer. But upon learning that she was not the President’s lawyer what did Shah do? Effectively nothing. See Ex.605, Shah 297:18-298:2. [italics my emphasis]

Fox learned that Sidney Powell never had a retention agreement with the Trump campaign, but still covered her, purportedly, based on the claim that what she did for the campaign was newsworthy.

It’s these two comments that are particularly interesting though: Fox brought her on and off the campaign, and had a role in her conspiracy theories.

And while Powell appeared on Fox only four times when she was even arguably part of the President’s team, and six times when Fox was clearly aware that she was not. As important, Fox was instrumental in maneuvering Powell both into the Trump campaign and then out of it.

Third, Fox ignores its own role in developing the conspiracy theories it then aired See Dom. MSJ pp.39-44

These two claims — that Fox “maneuvered Powell … out of” the Trump campaign and that they played a role in developing these conspiracy theories, are discussed in heavily redacted passages of the earlier filing (probably redacted because Fox has claimed it pertains to internal business deliberations).

The first — describing how Fox “maneuvered Powell … out of” the Trump campaign after Tucker came under fire for questioning Powell — consists of almost four full paragraphs introduced with a description that Fox, including Tucker and Raj Shah, “mobilized.”

“We won the battle with Powell. Thank god,” the passage quotes a Tucker text later. Dominion is now explaining that that “battle” pertained to getting Powell ousted from Trump’s orbit.

The second claim — that Fox was the source of some of these conspiracy theories — incorporates the description of how Fox got Powell ousted from the campaign, but also includes redacted passages describing Lou Dobbs’ role in “promoting the narrative,” another making a redacted reference to Hannity, as well as the unredacted reference to Bartiromo chasing an email from Sidney Powell that Powell herself said relied on a “wackadoodle” source. The later filing suggests the earlier filing goes as far as saying that Fox played part in developing the conspiracy theories.

To be sure: Fox’s real-time knowledge that Sidney Powell never had a formal relationship with Trump and Tucker’s [apparent] role in getting her ousted from Trump’s orbit are critically important for Dominion’s case that Fox properties continued to air her conspiracy theories, falsely claiming to do so because they reflected Trump’s strategy, are both crucial pieces of evidence in their case that Fox knew they were allowing Powell to make false claims on their shows.

But they are important for another reason: because Jack Smith is investigating at least one and possibly two (the Sidney Powell investigation that went overt in September 2021) prongs based on claims that the people raising money were knowingly lying.

Fox likely still has no criminal exposure for the campaign finance violations that Smith is investigating (though the report that Rupert gave Jared confidential information on Biden’s ads may give Smith reason to look more closely).

But, as I noted after the last filing, all this material about what Fox was being told by Trump’s team is directly relevant to those suspicions of fraud.

It’s not just that Dominion has laid out damning evidence that Fox knowingly and falsely accused it of fraud. But discovery in this suit appears to have produced abundant evidence that the campaign itself knew it was recycling fraudulent claims Fox was peddling to keep Trump loyal.

Fox may have no more than this civil exposure. But Dominion lays out plenty of evidence that Fox was part of Trump’s suspected fraud on his own voters.

Four Stories about Paul Manafort from Andrew Weissmann’s Team M

The NYT recently liberated via FOIA the alternative report written by Andrew Weissmann’s Team M, focused on Manafort, as part of the Mueller investigation. As Josh Gerstein described when he wrote up the report, it is heavily redacted and as such includes virtually no new factual details from what has already been made public. But that doesn’t mean the report is uninteresting.

After all, even presenting exactly the same allegations that we’ve seen elsewhere as it does, the report tells us certain things about the investigation.

Before I lay out what the report shows, I want to review the four times this story has been told:

As I laid out in my Rat-Fucker Rashomon series on Roger Stone, by comparing the various stories and understanding how each meets the particular genre and purpose of the document, we can better identify the gaps and inclusions of each.

(Another place to find more of the investigation into Manafort is in interview 302s; I’ve pulled together all the 302s for Sam Patten and Rick Gates; many of the most recent versions of the Manafort 302s appear in this FOIA release.)

The four stories, read together, reveal that there was a great deal of evidence that Oleg Deripaska and Konstantin Kilimnik leveraged Manafort as part of their very active role in the 2016 operation, as well as follow-up efforts to undermine the investigation into the 2016 operation. The SSCI Report even suggests Kilimnik had a role in the hack-and-leak campaign. Yet none of that showed up in unclassified parts of the Mueller Report and related documents. That’s partly true because all three of those documents — the unclassified part of the Team M Report, the Breach Determination, and the Mueller Report itself — played specific legal functions.

As with the ongoing investigation into Roger Stone that continued past the conclusion of the Mueller Report, those specific legal roles do not entail laying out where an ongoing investigation is headed. That’s why one of the most informative parts of the Team M Report, as released 40 months after it was written, are the number of sections that remain redacted under a b7A ongoing investigation redaction.

N0vember 18, 2018: Team M Report

In the days after the mid-term election in 2018, Trump fired Jeff Sessions, foreboding a different approach to Mueller’s supervision. Whether or not Mueller might otherwise have continued the investigation, with Sessions’ firing, investigators moved to conclude their work and write up a report of prosecutions and declinations. Team M wrote this report with an eye to documenting all their work. As Weissmann explained in his book, this report arose out of frustration with the decisions that Mueller’s Chief of Staff, Aaron Zebley had made, both in limiting the scope of the investigation (which significantly excluded a review of Trump’s finances), and by obscuring gaps in the conclusions.

Teams M and R had many back-and-forths with Aaron with respect to this problem while drafting the report. Aaron was adamant that our report be conclusive, making only definitive conclusions, while the teams on the ground pushed back, noting the many gray areas and gaps in our evidence and the realms we decided not to examine, including the president’s financial ties to Russia; our failure to obtain the truthful cooperation of witnesses who’d been influenced by the president’s conduct in dangling the prospect of a pardon; what questions remained outstanding; what evidence we could not obtain; and our inability to interview certain other witnesses at all, up to and including the president. Only some of these limitations made it into the final report, as Team M and Team R did not have the pen—that is, the final say. To remedy this, at least for posterity, I had all the members of Team M write up an internal report memorializing everything we found, our conclusions, and the limitations on the investigation, and provided it to the other team leaders as well as had it maintained in our files.

We should have been more transparent. We knew our report would be made public and, while our superiors at the Justice Department understood the ultimate parameters of our investigation, the American people did not and cannot be expected to glean them all from our report.

In the end, the wrongdoing we found in the areas in which we chose to look, particularly in the one Russian financial deal we examined as a result of Cohen’s cooperation, left me with a deeply unsatisfying feeling about what else was out there that we did not examine. One of my strengths—and simultaneously one of my flaws—as an investigator is the desire to turn over every rock, go down every rabbit hole, try to master every detail. In this investigation, that tenacity was as much an asset as a curse: The inability to chase down all financial leads, or to examine all crimes, gnawed at me, and still does.

This report, then, was an attempt to capture significant findings that would not make it into the ultimate report.

The Team M Report is structured this way:

The Manafort Investigation — Overview

  • Manafort’s Background
  • Manafort, Gates, and Kilimnik’s Criminal Prosecutions
  • Manafort’s Ties to Russia and Ukraine
    • Deripaska Consulting Work
      • The Pericles Fund
    • Ukraine Political Consulting Work
    • Kilimnik
    • Manafort’s Work on the Trump Campaign (March–August 2016)
    • Russia & Ukraine Communications 2016-2018
      • Communications in March 2016
      • Communications in Spring/Summer 2016
      • The August 2, 2016 Meeting
        • [Manafort’s Account]
        • Gates’ Account
        • Patten’s Account
      • Manafort’s Sharing Trump Campaign Polling Data with Kilimnik
      • Post-Election Meetings and Contacts

In addition to that overview, the report includes three things:

  • Lettered footnotes: These seem to explain the context and gaps that Weissmann complained were not making it into the final report.
  • Numbered footnotes: These provide the sources and map directly onto the publicly identified sources in the Mueller Report itself.
  • “A supplemental submission which is classified:” We can identify some of what might appear in this supplemental submission from the SSCI Report.

December 7, 2018 through March 2, 2019: Breach Litigation

The Team M Report is dated just three days after a joint request to delay a status report in Manafort’s case and eight days before the delayed joint status report reported that Manafort had breached his plea agreement. So it was written at a time when the Weissmann team understood that Manafort had strung them out through the election and had presumably decided to hold him in breach of his plea agreement. But the Team M Report does not correlate, in structure or content, to the list of topics that Weissmann’s team asserted (successfully in three of five areas) that Manafort had been lying about.

The primary representations from Weissmann’s team in the breach litigation were:

In those documents and the hearing, Weissmann’s team laid out their case that Manafort had lied about:

Payment to Wilmer Hale: Manafort engaged in some kind of dodgy accounting — perhaps some kind of kickback involving two of Manafort’s firms — to get money to pay his lawyers at Wilmer Hale, who represented Manafort until August 2017.

Manafort’s efforts to protect Konstantin Kilimnik in the witness tampering conspiracy: In 2018, Kilimnik and Manafort were charged for conspiring to hide aspects of their Hapsburg Project, a front NGO used to hide lobbying for Ukraine behind high ranking former European officials. ABJ ruled that the government had not proven that Manafort lied about this topic, because Manafort quickly flip-flopped on his efforts to deny that Kilimnik had conspired with him to hide details of the front.

Interactions with Kilimnik: ABJ did rule that Manafort had lied to cover up details of his interactions with Konstantin Kilimnik, starting during the election and continuing through 2018. This accused lie covers much of the material presented in the Team M Report, but covers (at least in unclassified form, though the classified supplement to the Team M Report must include later communications) a broader time period.

Another DOJ investigation: ABJ judged that Weissmann’s team proved that Manafort lied to cover up details pertinent to another investigation. Given the timing of the allegations and a footnote that must modify the overview section links to Michael Cohen’s Criminal Information, the other investigation is likely the investigation into hush payments to Karen McDougal. The government’s initial submission describes that the information implicated Senior Administration Officials, which must implicate Trump himself and, likely, Kushner. In addition to Cohen and Don Jr., some parts of this lie also appear to implicate Roger Stone.

Manafort’s Contact with the Administration: The government tried, but failed, to prove that Manafort was hiding his ongoing contacts with the Trump Administration, including lobbying others were doing targeting the Department of Labor pertaining to ERISA. Significantly, prosecutors did not include ongoing communication conducted via lawyers.

March 22, 2019: Mueller Report

While Manafort shows up throughout the Mueller Report, the discussion of his case appears in four key areas:

All these prosecution, declination, and referral decisions — save the obstruction discussion pertaining to Trump himself — appear in a series of footnotes in Team M (curiously, Alex Van der Zwaan only appears in the Mueller Report in the “Referenced Persons” section, even though he is not referenced in the report itself). That reflects the stated difference in the documents. The legal purpose of the Mueller Report, as I’ve repeatedly reminded, was to lay out such prosecutorial decisions. Everything in the report should serve to explain those prosecutorial decisions and — at least in the Stone case — prosecutorial decisions that had not yet been reached don’t show up in the body of the Report.

The Manafort section is similar to, but does not quite map to, the structure of the Team M Report:

Overview

  • Paul Manafort’s Ties to Russia and Ukraine
    • Oleg Deripaska Consulting Work
    • Political Consulting Work
    • Konstantin Kilimnik
  • Contacts during Paul Manafort’s Time with the Trump Campaign
    • Paul Manafort Joins the Campaign
    • Paul Manafort’s Campaign-Period Contacts
    • Paul Manafort’s Two Campaign-Period Meetings with Konstantin Kilimnik in the United States
    • Post-Resignation Activities

For reasons I’ll lay out below, I’m most interested that the Team M Report — which has a classified supplement — has a heading for “Communications in Spring/Summer 2016” and “The August 2, 2016 Meeting,” whereas the Mueller Report splits this into “Campaign-Period Contacts” and “Two Campaign-Period Meetings with Konstantin Kilimnik in the United States.”

August 18, 2000: SSCI Report

Finally, there is the substantial section — 142 pages of the 966 page report — of the SSCI Report dedicated to explaining why Paul Manafort was a counterintelligence threat to Donald Trump. This section treats Manafort as a threat because of his close ties to Deripaska and Kilimnik, and as such, SSCI’s discussions of those men’s roles in the 2016 operation appear in the Manafort section.

As I observed when conducting a similar comparison for Stone, both because the SSCI Report came later and because it is the only report that attempted to be comprehensive, it included things that weren’t included in the earlier reports.

Importantly, for our purpose, the SSCI Report’s approach to secrets was different. Whereas the Team M Report included a classified supplement, the SSCI Report included such material in the body of the report. Large swaths of this section were deemed classified when the SSCI Report was released in 2020 and, in spite of the fact that Avril Haines promised a review of these classification decisions, nothing new has been released since.

Here’s how the Manafort section of the SSCI Report is organized:

  • Introduction and Findings (included three entirely classified bullets on Kilimnik’s role in the hack-and-leak)
  • Limitations on the Committee’s Investigation
  • Background on Manafort’s Foreign Activities
    • Manafort’s Work with Oleg Deripaska
      • Manafort’s Influence Operations in Ukraine
      • Manafort’s Global Influence Operations for Deripaska
      • Konstantin Kilimnik
      • Pericles
    • Manafort’s Work in Ukraine for the Party of Regions (PoR)
  • Manafort’s Activities from 2014 until Joining the Trump Campaign
    • Former-PoR Associates in Ukraine
    • Deripaska and Pericles Lawsuit
  • Manafort’s Activities While Serving on the Trump Campaign
    • Manafort’s Entry into the Trump Campaign
    • Kilimnik’s Awareness of Manafort’s Hiring Before the Public Announcement [including redacted section that, by context, must describe a March 2016 Kilimnik trip to the US]
    • Manafort Announces His Position on the Trump Campaign; Extends Private Offers to Russian and Ukrainian Oligarchs
    • [Heavily redacted section on] Kilimnik and Deripaska’s Activities in April
    • Manafort and Kilimnik Meet in New York City; Discuss Ukraine, Trump Campaign Strategy; Sharing of Internal Trump Campaign Polling Data with Kilimnik Begins
    • Manafort Offers to Brief Deripaska Through Kilimnik and Boyarkin; Kilimnik Appears to Have Insider Knowledge of Trump Campaign; [redacted] and Kilimnik Coordinate on [redacted] [includes redacted sections addressing Steele Report]
    • Manafort Meets with Kilimnik at the Grand Havana Room in New York City; They Discuss Polling Data, Ukraine Plan, and Debts
      • Internal Polling Information and Trump Campaign Strategy
      • Ukraine Peace Plan
    • [Heavily redacted section on] Possible Connections to GRU Hack-and-Leak Operation
    • The “Ledger” and Manafort’s Resignation
  • Manafort’s Activities For the Remainder of the Campaign
    • Manafort’s Continued Contact with the Trump Campaign; Kilimnik’s awareness of these contacts
    • Manafort’s Involvement in Ukrainian Government Outreach to the Campaign
  • Manafort’s Activities After the Election
    • [Redacted] Kilimnik Seeks to Leverage His Relationship with Manafort; Coordinates [redacted]
    • Manafort and Kilimnik Communicate with Yanukovych in Russia Related to Ukraine Plan; Attempt Communications Countermeasures
    • [Redacted] Kilimnik and Boyarkin Arrange Meeting for Manafort in Madrid; Manafort [redacted]
    • Kilimnik and Lyovochkin Travel to Washington D.C. for Inauguration, Meet with Manafort and Discuss Ukraine
    • Kilimnik and Manafort Meet in Madrid; Discuss Counter-Narratives and Ukraine
    • [Significantly Redacted] Russian Influence Operations to Undermine Investigations into Russian Interference [includes developments through late 2019, including Rudy Giuliani-related activities of John Solomon]
    • Manafort’s Continued Efforts with Kilimnik on Ukraine; Kilimnik’s Own Continued Activities [includes 8 mostly-redacted pages going through 2020]
    • Manafort and Gates Communications Regarding Investigations
  • Manafort’s Associates Ties to Russian Intelligence Services [Heavily redacted]
    • Oleg Deripaska and His Aides
      • Deripaska’s Kremlin Ties
      • Deripaska’s “Chief of Staff”: Viktor Boyarkin
      • Deripaska’s Strategic Advisor: Georgy Oganov
      • Deripaska’s Role in Russian Active Measures in Montenegro
      • Deripaska’s Involvement in Other Russian Active Measures
      • Deripaska’s Connections to Hacking Operations
    • Konstantin Kilimnik

The section of the Manafort materials dedicated to limitations on SSCI’s investigation makes it clear that it relies, in significant part, on the Mueller Report, with all the limitations on that given Manafort’s obstruction. That said, the SSCI Report scope goes through 2019, so obviously also includes later intelligence reporting for many of the mostly redacted later passages. Yet the SSCI Report includes great swaths of material that appear nowhere in the public Mueller materials — save, perhaps, in the classified supplement referenced in the Team M Report. That includes March 2016 visits — seemingly by both Kilimnik and Deripaska — to the US, as well as something that happened in April 2016 more closely linked to Trump’s campaign.

These vast redactions — going to core issues of the Mueller investigation, such as whether Trump’s own campaign manager and the campaign manager’s life-long rat-fucker friend had a direct role in the hack-and-leak campaign and disinformation injected through the Steele dossier — likely reflect both the redacted sections in the earlier reporting and, more importantly, the classified supplement of the Team M Report.

That all means it was likely that, when Trump fired Jeff Sessions in November 2018, the Mueller team had evidence directly linking Manafort, through Kilimnik and through him to Deripaska, to the hack-and-leak operation.

That may explain why Weissmann wanted to ensure his team captured their findings in the Team M Report.

John Durham: Destroying the Purported Victims to Save Them

I’ve covered a great deal of prosecutions involving FISA materials. In just one — that of Reaz Qadir Khan — was the defendant able to use sensitivities around FISA to get a better plea deal (and in that case, there were extenuating circumstances, possibly including a dead FISA target and Stellar Wind collection). I also covered the Scooter Libby case, in which Libby attempted — and very nearly succeeded — in forcing prosecutors to dismiss the case by demanding the declassification of a slew of Presidential Daily Briefs. But even the Libby case may pale in comparison to the difficulties John Durham has signed up for in his prosecution of Igor Danchenko.

That’s true because Danchenko will credibly be able to demand materials from at least two FISA orders, as well as two other counterintelligence investigations, including a sensitive, multi-pronged, ongoing investigation, to defend himself.

Indeed, there’s even a chance DOJ cannot legally prosecute Danchenko in this case.

What follows is true regardless of whether Danchenko was indicted on shoddy evidence as part of a witch hunt or if Durham has Danchenko dead to rights defrauding the FBI to target Donald Trump. I remain agnostic which is the case (the truth is likely somewhere in-between). It is true regardless of whether Carter Page and Sergei Millian were truly victimized as a result of the Steele dossier, or whether they were reasonable counterintelligence targets whose investigations got blown up in a political firestorm.

This has everything to do with the prosecutorial discretion that Durham did not exercise in charging Danchenko (and because of some sloppiness in the way he did so) and nothing to do with Danchenko’s guilt or innocence or Page and Millian’s victimization.

Consider the following moves Durham made in his indictment:

  • He invoked Danchenko’s source, Olga Galkina, in his materiality claims and based his single charge pertaining to Charles Dolan on a June 15, 2017 FBI interview.
  • He relied on claims Sergei Millian made about interactions with Danchenko as part of his proof that Danchenko lied about his belief that he had spoken with Millian. Durham did so, apparently, based entirely on Millian’s currently public Twitter blatherings.
  • He made Carter Page’s FISA targeting — and its role in the investigation into Trump associates (which Durham recklessly called “the Trump campaign”) — central to his materiality claims.

Whether Igor Danchenko is a reckless smear agent or someone screwed by Christopher Steele’s own sloppiness, he is entitled to all the evidence pertaining to the full scope of the indictment, as well as any exculpatory evidence that could help him disprove Durham’s claims. One of the prosecutors in the case, Michael Keilty, already warned Judge Anthony Trenga, who is presiding over the case, that there will be “a vast amount of classified discovery” in this case. But if prosecutors haven’t vetted Millian any further than reading his Twitter feed, they may have no idea what discovery challenges they face.

There has never been a case like this one, relying on two already publicly identified FISA orders, so this is literally uncharted waters.

Durham’s Matryoshka Materiality Claims

Before I explain the challenges Durham faces, it’s worth explaining how Durham has used materiality in this indictment. Durham will have to prove not just that Danchenko lied, but that the lies were material.

The words “material” or “materiality” show up in the indictment 20 times, of which just one instance is used to mean “stuff” (in a misquotation of a Danchenko response to an FBI question stating, “related issues perhaps but … nothing specific”). Five are required in the charging language.

Maybe Durham focused so much making claims about materiality, in part, because he’s smarting about the way people made fun of him for his shoddy materiality claims in the Michael Sussmann indictment. But many of his discussions about the “materiality” of Danchenko’s alleged lies, both charged and uncharged, serve as a gratuitous way for Durham to include accusations in the indictment he didn’t charge. The tactic worked like a charm, as multiple journalists reported that things — particularly regarding the pee tape — were alleged or charged that were not. But now he’s on the hook for them in discovery.

Below, I’ve shown how these materiality claims form a nested set of allegations, such that even the materiality claims for uncharged conduct make up part of his overall materiality argument. I’m not, at all, contesting that Durham has a sound case that — if he can prove Danchenko lied — at least one of lies was material. While some of his materiality claims are provably false and some (such as the claims that Danchenko’s alleged lies about Millian in October and November 2017 mattered for FISA coverage that ended in September 2017) defy physics, the bar for materiality is low and he will clearly surpass it on some of his materiality claims.

The issue, however, is that Durham is now on the hook, with regards to discovery, for all of his materiality claims covering both the charged lies and the uncharged allegations. Danchenko may now demand evidence that undercuts these claims, even the ones that don’t relate directly to the charged lies.

The Section 702 directive targeting Olga Galkina

Durham makes two materiality claims pertaining to Danchenko’s friend, Olga Galkina, to whom he sourced all the discredited Michael Cohen reports and a claim about Carter Page’s meetings in July 2016:

  • That by lying about how indiscreet he was about his relationship with Christopher Steele, Danchenko prevented the FBI from learning that Russian spies might inject disinformation into the dossier through people like Galkina.
  • That by lying on June 15, 2017, Danchenko prevented the FBI from learning that Charles Dolan “maintained a pre-existing and ongoing relationship” with Galkina, which led Galkina to have access to senior Russian officials she wouldn’t otherwise have had. Dolan’s ties with Galkina also appear to have led to Galkina serving as a cut-out between Dolan and Danchenko for information for one of the reports (pertaining to the reassignment of a US Embassy staffer) in the dossier.

I’m unclear why Durham made these claims — possibly because it was one of the only ways to criminalize the way Dolan served as a source for reports that were unrelated to the Carter Page applications, possibly because he wanted to do so to dump HILLARY HILLARY HILLARY in the middle of his indictment. But both claims are false.

To prove the first is false, Danchenko will point to Durham’s miscitation of the question Danchenko was actually asked, his answer — “yes and no” — to a question Durham claims he answered “no” to, and to his descriptions, from his very first interview, of how Galkina knew he was collecting intelligence and had even, after the release of the dossier, tasked him with an intelligence collection request herself.

To prove the second is false, Danchenko will point to the declassified footnote in the DOJ IG Report showing that in “early June 2017” (and so, presumably before June 15), the FBI obtained 702 collection that (the indictment makes clear) reflects extensive communications between Dolan and Galkina.

The FBI [received information in early June 2017 which revealed that, among other things, there were [redacted]] personal and business ties between the sub-source and Steele’s Primary Sub-source; contacts between the sub-source and an individual in the Russian Presidential Administration in June/July 2016; [redacted] and the sub‐source voicing strong support for candidate Clinton in the 2016 U.S. elections. The Supervisory Intel Analyst told us that the FBI did not have Section 702 coverage on any other Steele sub‐source. [my emphasis]

It’s highly likely the FBI set up that June 15, 2017 interview with Danchenko precisely to ask him about things they learned via that Section 702 collection. Based on what Durham has said so far, Danchenko provided information about key details of the relationship between Galkina and Dolan in the interview, thereby validating that he was not hiding the relationship entirely.

Had Danchenko affirmatively lied about this in January or March 2017, rather than just not sharing this information, Durham might have a case. But by June 2017, the FBI was already sitting on that 702 collection (to say nothing of the contact tracing analysts would have used to justify the 702 directive). That’s almost certainly why they asked the question about Dolan.

So even if Durham could manage to avoid introducing, as evidence at trial, Danchenko’s communications with Galkina that the FBI would have first obtained under FISA 702, and thereby stave off the FISA notice process required for aggrieved persons under FISA, Danchenko is still going to have cause to make Durham admit a slew of things about that Section 702 directive targeting Galkina, including:

  • What kind of contact-tracing alerted the FBI and NSA that Galkina had US-cloud based communications that would be of investigative interest (because that contact-tracing, by itself, disproves Durham’s materiality claim)
  • What communications FBI obtained from that Section 702 order and when (because if they indeed had the Galkina-Dolan communications on June 15, then nothing Danchenko could have said impeded the FBI from discovering them)
  • The approval process behind the release of this Section 702 information to Inspector General Michael Horowitz, and then to Congress, which in turn presumably alerted Durham to it, and whether it complied with new requirements about unmasking imposed in 2018 in response to the Carter Page FISA and conspiracy theories about Mike Flynn (it surely did, because unmasking for FBI collections is not really a thing, but Danchenko will have reason to ask how Congress got the communications and from there, how Durham did)

None of this kind of information has been released to a defendant before, but all of it is squarely material to combatting the claim that the FBI didn’t know about Galkina’s communications with Dolan when they asked Danchenko a question precisely because they did know about those communications. And Danchenko has the right to ask for it because of that reference to Section 702 that Ron Johnson and Chuck Grassley insisted on declassifying.

The Sergei Millian counterintelligence investigation

The paragraph describing that Durham is relying on Sergei Millian’s Twitter rants as part of his evidence to prove that Danchenko lied five times about Millian (just four of which are charged) misspells Danchenko’s name, the single such misspelling in the indictment. [Update: Though see William Ockham’s comment below that notes there’s a different misspelling of Danchenko’s name elsewhere in the Millian part of the indictment.]

Chamber President-1 has claimed in public statements and on social media that he never responded to DANCHEKNO’s [sic] emails, and that he and DANCHENKO never met or communicated.

That makes me wonder whether it was added in at the last minute, after all the proof-reading, perhaps in response to a question from the grand jury or Durham’s supervisors. If it was, it might indicate that Durham didn’t really think through all the implications of invoking Millian as a fact witness against Danchenko.

But, unless Durham has rock-solid proof that Danchenko invented a call he claimed to believe had involved Millian altogether, then this reference now gives Danchenko cause to submit incredibly broad discovery requests about Millian to discredit Millian as a witness against him. Durham made no claim that he has such rock-solid proof in the indictment. As I’ve noted, Danchenko told the FBI he replaced his phone by the time the Bureau started vetting the Steele dossier, so to rule out that the call occurred, Durham probably would need to have obtained the phone and found sufficient evidence that survived a factory reset to rule out a Signal call.

Before I explain all the things Danchenko will have good reason to demand, let me review Durham’s explanation for why the alleged lies about Millian (Durham has charged separate lies on March 16, May 18, October 24, and November 16, 2017) were material:

Based on the foregoing, DANCHENKO’s lies to the FBI claiming to have received a late July 2016 anonymous phone call from an individual that DANCHENKO believed to be Chamber President-1 were highly material to the FBI because, among other reasons, the allegations sourced to Chamber President-1 by DANCHENKO formed the basis of a Company Report that, in turn, underpinned the aforementioned four FISA applications targeting a U.S. citizen (Advisor­ 1). Indeed, the allegations sourced to Chamber President-1 played a key role in the FBI’s investigative decisions and in sworn representations that the FBI made to the Foreign Intelligence Surveillance Court throughout the relevant time period. Further, at all times relevant to this Indictment, the FBI continued its attempts to analyze, vet, and corroborate the information in the Company Reports. [my emphasis]

As I have noted above, it is temporally nonsensical to claim that lies Danchenko told in October and November 2017 “played a role in sworn representations that the FBI made to FISC” when the last such representation was made in June 2017. And Danchenko will be able to make a solid case that no matter what he said in March and May, it would have had no impact on the targeting of Carter Page, because as a 400-page report lays out in depth, really damning details about the Millian claim that Danchenko freely did share in January had no impact on the targeting of Carter Page. Even derogatory things Christopher Steele said about Millian in October 2016 never made any of the Page FISA applications. The DOJ IG has claimed and Judge Rosemary Collyer agreed that FBI was at fault for all this, because they weren’t integrating any of the new information learned from vetting the dossier. Danchenko might even be able to call a bunch of FBI witnesses who were fired as a result to prove they were held accountable for it and so he can’t be blamed.

So Durham will substantially have to rely on “investigative decisions” and FBI efforts to vet the dossier to prove that Danchenko’s claimed lies about Millian were material. And that will make the FBI investigations into Millian himself and George Papadopoulos relevant and helpful to Danchenko’s defense, because those are some of the investigative decisions at issue.

That’s not the only reason that Danchenko will be able to demand that DOJ share information on Millian. Durham has made Millian a fact witness against Danchenko, and — by relying on Millian’s Twitter feed — in the most ridiculous possible way. So Danchenko will be able to demand evidence that DOJ should possesses (but may not) that he can use to explain why Millian might lie about a call between the two.

Some things Danchenko will credibly be able to demand in discovery include:

  • Extensive details about Sergei Millian’s Twitter account. Durham presented Millian’s Twitter account to the grand jury as authoritative with regards to Millian’s denials of having any direct call with Danchenko. Danchenko has reason to ask Durham for an explanation why he did so, as well as a collection of all tweets that Millian has made going back to 2016 (most of which Millian has since deleted, some of which will raise questions about Millian’s sincerity and claimed knowledge of non-public information). In addition, because there have been questions (probably baseless, but nevertheless persistent) during this period about whether Millian was personally running his own Twitter campaign, Danchenko can present good cause to ask for the IP and log-in information for the entire period, either from the government or from Twitter. While it would be more of a stretch, Millian’s Twitter crowd includes some accounts that have been identified as inauthentic by Twitter and others that were involved in publicly exposing Danchenko’s identity; Danchenko might point to this as further evidence of Millian’s motives behind his Twitter rants. Finally, Danchenko will also have cause to ask how Millian got seeming advance notice of his own indictment if Durham’s investigators never bothered to put Millian before a grand jury.

  • Details of the counterintelligence investigation into Millian. After the first release of the DOJ IG Report, the FBI declassified parts of discussions of a counterintelligence investigation that the New York Field Office opened into Millian days before October 12, 2016. The IG Report describes that Millian was “previously known to the FBI,” and does not tie that CI investigation to any allegations that Fusion made against Millian (though I don’t rule it out). Danchenko will obviously be able to ask for access to the still-redacted parts of those IG Report references, because the same things (whatever they were) that led FBI to think Millian was a spy would be things that Danchenko could use to offer a motive for why Millian would lie about having spoken to Danchenko. Danchenko also has cause to ask for details from Millian’s own FBI file. The basis for that counterintelligence investigation, and any derogatory conclusions, would provide Danchenko means to raise questions about Millian’s credibility or at least alternative motives for Millian to claim no such call took place.
  • Details of how Millian cultivated George Papadopoulos. The IG Report also reveals that, even before the Carter Page application, the FBI was aware of the extensive ties between Millian and George Papadopoulos. Because Durham claims that Danchenko’s alleged lies — and not direct evidence pertaining to the relationship between Millian and Papadopoulos — drove the FBI’s investigative decisions from 2017 through the end of the Mueller investigation, Danchenko will have reason to ask for non-public details about some aspects of the Papadopoulos investigation, as well, not least because (as the Mueller Report makes clear) the initial contacts between Millian and Papadopoulos exactly parallel in time — and adopted the same proposed initial meeting approach — the initial contact and the call that Danchenko claimed to believe he had with Millian. If the July 2016 call he believes he had with Millian didn’t occur, Danchenko will be able to argue persuasively, then how did he know precisely where and how Millian would conduct such meetings a week in advance of the initial meeting, in New York, that Millian had with Papadopoulos?

The Office investigated another Russia-related contact with Papadopoulos. The Office was not fully able to explore the contact because the individual at issue-Sergei Millian-remained out of the country since the inception of our investigation and declined to meet with members of the Office despite our repeated efforts to obtain an interview. Papadopoulos first connected with Millian via Linked-In on July 15, 2016, shortly after Papadopoulos had attended the TAG Summit with Clovis.500 Millian, an American citizen who is a native of Belarus, introduced himself “as president of [the] New York-based Russian American Chamber of Commerce,” and claimed that through that position he had ” insider knowledge and direct access to the top hierarchy in Russian politics.”501 Papadopoulos asked Timofeev whether he had heard of Millian.502 Although Timofeev said no,503 Papadopoulos met Millian in New York City.504 The meetings took place on July 30 and August 1, 2016.505 Afterwards, Millian invited Papadopoulos to attend-and potentially speak at-two international energy conferences, including one that was to be held in Moscow in September 2016.506 Papadopoulos ultimately did not attend either conference.

On July 31 , 2016, following his first in-person meeting with Millian, Papadopoulos emailed Trump Campaign official Bo Denysyk to say that he had been contacted “by some leaders of Russian-American voters here in the US about their interest in voting for Mr. Trump,” and to ask whether he should “put you in touch with their group (US-Russia chamber of commerce).”507 Denysyk thanked Papadopoulos “for taking the initiative,” but asked him to “hold off with outreach to Russian-Americans” because “too many articles” had already portrayed the Campaign, then-campaign chairman Paul Manafort, and candidate Trump as “being pro-Russian.”508

On August 23, 2016, Millian sent a Facebook message to Papadopoulos promising that he would ” share with you a disruptive technology that might be instrumental in your political work for the campaign.”509 Papadopoulos claimed to have no recollection of this matter.510

On November 9, 2016, shortly after the election, Papadopoulos arranged to meet Millian in Chicago to discuss business opportunities, including potential work with Russian “billionaires who are not under sanctions.”511 The meeting took place on November 14, 2016, at the Trump Hotel and Tower in Chicago.512 According to Papadopoulos, the two men discussed partnering on business deals, but Papadopoulos perceived that Millian’s attitude toward him changed when Papadopoulos stated that he was only pursuing private-sector opportunities and was not interested in a job in the Administration.5 13 The two remained in contact, however, and had extended online discussions about possible business opportunities in Russia. 514 The two also arranged to meet at a Washington, D.C. bar when both attended Trump’s inauguration in late January 2017.515 [my emphasis]

John Durham claims that Sergei Millian is a victim. But by making Millian a fact witness against Danchenko, Durham has given Danchenko the opportunity to obtain and air a great many details about why a DOJ prosecutor should review more than Twitter rants before treating Millian as a credible fact witness.

The Oleg Deripaska counterintelligence and sanctions investigations

Durham has also provided Danchenko multiple reasons to request details of a counterintelligence investigation that is ongoing and remains far more sensitive than the Millian one: The investigation into Oleg Deripaska.

Oleg Deripaska was the most likely client for a tasking Steele gave Danchenko immediately before the DNC one, collecting on Paul Manafort. Danchenko credibly claimed to the FBI that he did not know what client had hired Steele. If Deripaska was that client, it would be relevant and helpful to Danchenko’s defense to understand why Deripaska hired Steele.

That’s true, in significant part, because Deripaska is also the most likely culprit behind any disinformation injected into the Steele dossier. Among other things, by asking Steele to collect on Manafort and then monitoring how Steele did that, Deripaska could have used it to identify Steele’s reporting network.

Durham blames Danchenko for hiding the possibility of disinformation with one of his (false) uncharged conduct claims, but the Deripaska angle, about which Danchenko claimed to have no visibility either in real time in 2016 or by 2017, when he is accused of lying, would be the more important angle. And we know they were aware of the possibility and trying to assess whether that was possible even as they were vetting the dossier. But, as Bill Priestap told DOJ IG, he couldn’t figure out how this would work.

what he has tried to explain to anybody who will listen is if that’s the theory [that Russian Oligarch 1 ran a disinformation campaign through [Steele] to the FBI], then I’m struggling with what the goal was. So, because, obviously, what [Steele] reported was not helpful, you could argue, to then [candidate] Trump. And if you guys recall, nobody thought then candidate Trump was going to win the election. Why the Russians, and [Russian Oligarch 1] is supposed to be close, very close to the Kremlin, why the Russians would try to denigrate an opponent that the intel community later said they were in favor of who didn’t really have a chance at winning, I’m struggling, with, when you know the Russians, and this I know from my Intelligence Community work: they favored Trump, they’re trying to denigrate Clinton, and they wanted to sow chaos. I don’t know why you’d run a disinformation campaign to denigrate Trump on the side. [brackets original]

Since Durham blamed Danchenko for hiding the possibility of disinformation when questions like these did more to impede such considerations, Danchenko has good reason to ask for anything assessing whether Deripaska did use the dossier as disinformation, not least because DOJ was getting ample information to pursue that angle before Danchenko’s first interview, via Bruce Ohr (for which DOJ fired Ohr).

There’s a Millian angle to Danchenko’s case he should get information on the counterintelligence investigation into Deripaska, too. At a time when Deripaska was already tasking both sides of his double game — using Christopher Steele to make Paul Manafort legally vulnerable and then using Manafort’s legal and financial vulnerability to entice his cooperation in the election operation — Deripaska and Millian met at the St. Petersburg International Economic Forum in June 2016, the same convention that Michael Cohen was invited to attend to pursue an impossibly lucrative Trump Tower deal and to which Russian Deputy Prime Minister Sergei Prikhodko repeatedly invited Trump (as this post makes clear, Mueller obtained only unsigned versions of Trump’s letter declining Prikhodko’s invitation).

Millian’s documented meeting with Deripaska during 2016 would provide Danchenko several reasons to want access to some of the investigative materials from the Deripaska investigations. First, if Millian and Deripaska had further contact, either in 2016, or since then, it would suggest that Millian’s denials that he called Danchenko may be part of the same disinformation strategy as any disinformation inserted via Deripaska-linked sources into the dossier itself.

If Millian had no ongoing relationship with Deripaska after they met up in June 2016, however, it suggests a possible alternate explanation for the call that, Danchenko consistently claimed in 2017, he believed to be Millian: That someone learned of Danchenko’s outreach (the Novosti journalists through whom Danchenko first got Millian’s contact information are one possible source of this information, but not the only one) and called Danchenko seemingly in response to Danchenko’s outreach to Millian as another way to inject disinformation into the dossier.

Finally, Danchenko may request information on Deripaska to unpack the provenance of the investigation against him altogether. After meeting with a Deripaska deputy in January 2017, Paul Manafort returned to the US and pushed a strategy to discredit the Russian investigation by discrediting the dossier, using Deripaska’s associate Konstantin Kilimnik to obtain information about its sources. That strategy adopted by Manafort is a strategy that has led, directly, to this Durham inquiry.

If Deripaska participated in any disinformation efforts involving the dossier and instructed Manafort to exploit the disinformation he knew had been planted — if this very investigation is the fruit of the same disinformation campaign that Durham blames Danchenko for hiding — then Danchenko would have good reason to make broad discovery requests about it.

DOJ has continued to redact Deripaska-related investigative detail under ongoing investigation exemptions. And Treasury refused Deripaska’s own attempt to learn why he was sanctioned. So it’s likely DOJ would want to guard these details closely.

But Deripaska’s key role in the Russian operation even as he was tasking Steele to harm Manafort, the tie between Millian and Deripaska, and the effort to use the dossier to discredit the Russian investigation make such requests directly relevant and helpful to Danchenko’s defense.

The Carter Page FISA Collection

This entire Durham investigation is, at least metonymically, an attempt to avenge Carter Page’s (and through him, Trump’s) purported victimization at the hands of the Steele dossier.

But even with Page, Durham’s materiality claims may expose Page to more scrutiny than he ever would have been without this case. Page may well have been victimized by the dossier itself, but Danchenko is not accused of any crime in conjunction with his collection related to the dossier. Instead, he is charged with lies to the FBI in March, May, October, and November 2017. There’s plenty of evidence in the 400-page DOJ IG Report that nothing Danchenko could have said in those earlier interviews could have altered FISA targeting decisions in April and June, and it would be impossible for lies told in October and November to have affected coverage that ended in September.

That means that Durham will have to provide Danchenko a great deal of information on the investigation into Page — including on Page’s willing sharing of non-public information with Russians in 2013, his seeming efforts to reestablish contact with the Russians in 2015, his enthusiastic pursuit of Russian funding to set up a think tank in 2016, and his ongoing connections in 2017 — to afford Danchenko the ability to argue that the dossier didn’t matter because, as a Republican Congressperson with access to all the intelligence told me in July 2018, the case for surveilling Page was a slam dunk even without it.

Providing Danchenko the Mueller materials will be the easy part. They would be helpful to Danchenko’s defense because they show that rumors about Page meeting Igor Sechin were circulating Moscow, not just among Steele’s sources; there was time during Page’s July 2016 trip to Moscow that was unaccounted for, even to those who organized his trip; and via the Page investigation, Mueller corroborated that Kirill Dimitriev (the guy who had a back channel meeting with Erik Prince) would be an important source on Russia’s tracking of Trump. Mueller materials will also show that the FBI came to suspect that one of the contacts involved in bringing Page to Russia in July 2016 was being recruited by Russian spies, providing independent reason to continue the investigation into Page. Mueller investigative materials will provide new details on Konstantin Kilimnik’s report to Paul Manafort that Page was claiming to speak on Trump’s behalf on his trip to Moscow in December 2016, something that may have exposed Trump as a victim of Page’s misrepresentations in Russia, which in turn, heightened the import of learning why Page was making such claims. Language from Mueller’s still-classified description of his decision not to charge Page as a Russian agent may also prove relevant and helpful to Danchenko’s defense.

But it’s not just the Mueller materials. To combat Durham’s claim that Danchenko’s claimed lies were material to the ongoing targeting of Carter Page in April and June 2017, the defendant obviously must be given access to substantial materials from Page’s FISA applications (October 2016, January 2017, April 2017, June 2017). Danchenko will be able to undercut Durham’s materiality arguments in at least two ways with these materials. First, as Andrew McCabe understood it, the first period of FISA collection was “very productive,” and others at FBI described that the collection showed Page’s, “access to individuals in Russia and [his communications] with people in the Trump campaign, which created a concern that Russia could use their influence with Carter Page to effect policy.” Danchenko can certainly ask for these discussions to argue that, even before he ever spoke to the FBI in January 2017, things the FBI learned by targeting Page under FISA created new reason to continue to task him, independent of the dossier.

Even more critically, redacted passages of the DOJ IG Report suggest that the decision to continue targeting Page in June 2017 stemmed almost entirely from a desire to get to financial and encrypted app information from Page that might not be otherwise available.

[A]vailable documents indicate that one of the focuses of the Carter Page investigation at this time was obtaining his financial records. NYFO sought compulsory legal process in April 2017 for banking and financial records for Carter Page and his company, Global Energy Capital, as well as information relating to two encrypted online applications, one of which Page utilized on his cell phone. Documents reflect that agents also conducted multiple interviews of individuals associated with Carter Page.

Case Agent 6 told us, and documents reflect, that despite the ongoing investigation, the team did not expect to renew the Carter Page FISA before Renewal Application No. 2’s authority expired on June 30. Case Agent 6 said that the FISA collection the FBI had received during the second renewal period was not yielding any new information. The OGC Attorney told us that when the FBI was considering whether to seek further FISA authority following Renewal Application No. 2, the FISA was “starting to go dark.” During one of the March 2017 interviews, Page told Case Agent 1 and Case Agent 6 that he believed he was under surveillance and the agents did not believe continued surveillance would provide any relevant information. Cast Agent 6 said [redacted]

SSA 5 and SSA 2 said that further investigation yielded previously unknown locations that they believed could provide information of investigative value, and they decided to seek another renewal. Specifically, SSA 5 and Case Agent 6 told us, and documents reflect, that [redacted] they decided to seek a third renewal. [redacted]

If declassified versions of this report (and the underlying back-up) confirm that, it means Danchenko’s alleged lies in May and June were virtually meaningless in ongoing decisions to target Page, because FBI would otherwise have detasked him if not for very specific accounts they wanted to target. Danchenko would need to be able to get declassified versions of that material to be able to make that argument.

Then there’s the FISA collection used to reauthorize FISA targeting on Page. There’s enough public about what FBI obtained for Danchenko to argue that he needs this collection to rebut the materiality claims Durham has made. For example, one redacted passage in reauthorization applications suggests that FBI learned information about whether Page’s break with the campaign was as significant as the campaign publicly claimed it was. Another redacted passage suggests FBI may have obtained intelligence that contradicted Page’s denials of certain meetings in Russia. A third redacted passage suggests that the FBI learned that Page was engaged in a limited hangout with his admissions of such meetings. Not only might some of this validate the dossier (and explain why Mueller treated the question of Page’s trips to Russia as inconclusive), but it provides specific reasons the FISA collection justified suspicions of Page, meaning FBI was no longer relying on the dossier.

Finally, since Durham claims that Danchenko’s lies impeded the FBI’s efforts to vet the dossier, Danchenko will need to be provided a great deal of information on those efforts.  This is another instance where files released as part of Trump’s efforts to undermine the investigation will help Danchenko prove there are discoverable materials he should get. This spreadsheet is what FBI used to vet the dossier. It shows that the FBI obtained information under the Carter Page FISA they used to vet a claim Danchenko sourced to his friend, Galkina, whom Durham made central to questions of materiality. Similarly, the FBI used information from the Page FISA to help vet the claim that Danchenko sourced (incorrectly or not) to Millian, which is utterly central to the case against him. Given Durham’s claims that Danchenko’s lies prevented FBI from doing this vetting, he can easily claim that obtaining this vetting information may be helpful and material to his defense (though it may in fact not be helpful).

This is a very long list and I’m not saying that Danchenko will succeed in getting this information, much less using it at trial.

What I’m saying is that it is quite literally unprecedented for a defendant to know specific details of two FISA orders — the 702 directive targeting Galkina and the Carter Page FISAs — that they can make credible arguments they need access to to mount a defense. Similarly, the ongoing, sensitive counterintelligence investigation into Oleg Deripaska (and Konstantin Kilimnik) is central to the background of the dossier. And Durham has made someone who — like Danchenko before him, was investigated as a potential Russian asset — a fact witness in this case.

Normally, prosecutors might look at the discovery challenges such legitimate defense demands would pose and decide not to try the case (it’s one likely reason, for example, why David Petraeus got away with a wrist-slap for sharing code-word information with his mistress, because the discovery to actually prosecute him would have done more damage than the conviction was worth; similarly, the secrecy of some evidence Mueller accessed likely drove some of his declination decisions). But Durham didn’t do so. He has committed himself to deal with some of the most sensitive discovery ever provided, and to do so with a foreign national defendant, all in pursuit of five not very well-argued false statements charges. That doesn’t mean Danchenko will get the evidence. But it means Durham is now stuck dealing with unprecedented discovery challenges.

In a follow-up, I’ll talk about how this will work and why it may be literally impossible for Durham to succeed.

Update: I’ve corrected the date of the month of the charged interview pertaining to Charles Dolan.

Update: In a story on an ongoing counterintellience investigation into a Russian expat group, Scott Stedman notes that the group was involved in Millian’s pitch to Papadopoulos in 2016.

Forensic News can reveal that Gladysh’s pro-Trump internet activity was much broader than previously known. In 2020, Gladysh’s Seattle-based Russian-American Cooperation Initiative founded a news website that nearly exclusively promoted Trump and disseminated Russian propaganda, according to internet archives.

The news website featured articles with the titles such as “Second Trump term is crucial to prospect of better U.S.-Russia relations, safer world,” and “Biden victory will spell disaster for U.S.-Russia relations, warns billionaire.” The billionaire referenced by the outlet is Oleg Deripaska, a key figure in the 2016 Trump campaign’s collusion with Russia.

[snip]

Morgulis attempted to rally Russian voters for Donald Trump in both the 2016 and 2020 U.S. Presidential Elections and allied himself with numerous associates connected to Russian intelligence and influence operations that have caught the attention of the FBI.

According to the Washington Post, Morgulis and Sergei Millian worked on a plan to rally Russian voters for Trump in 2016. Millian, who was in contact with Trump aide George Papadopoulos, later fled the country and was not able to be interviewed by investigators.

[snip]

Morgulis, Branson, and Millian all received Silver Archer Awards in 2015, a Russian public affairs accomplishment given to U.S. persons advancing Russian cultural and business interests. The founder of Silver Archer is Igor Pisarsky, a “Kremlin-linked public relations power player” who facilitated money transfers from a Russian oligarch to Maria Butina.

This will provide Danchenko cause to ask for details of that counterintelligence investigation.


Durham’s Materiality Claims

Durham’s general materiality argument makes three claims about the way that Danchenko’s alleged lies affected the FBI investigation. And then, nested underneath those claims, he made further claims (about half of which aren’t even charged), about the materiality of other things, a number of which have nothing to do with the Carter Page FISA. Of particular note, the bulk (in terms of pages) of this indictment discusses lies that Durham doesn’t tie back to Carter Page, even though he could have, had he treated Olga Galkina differently.

      • Danchenko’s lies were material because FBI relied on the dossier to obtain FISA warrants on Carter Page: “The FBI’ s investigation of the Trump Campaign relied in large part on the Company Reports to obtain FISA warrants on Advisor-1.”
        • Danchenko’s lie about believing Millian called him in July 2016 because it formed the basis of the FISA applications targeting Page: Danchenko’s alleged lies to the FBI about Millian, “claiming to have received a late July 2016 anonymous phone call from an individual that DANCHENKO believed to be Chamber President-I were highly material to the FBI because, among other reasons, the allegations sourced to Chamber President-I by DANCHENKO formed the basis of a Company Report that, in turn, underpinned the aforementioned four FISA applications targeting a U.S. citizen (Advisor­ 1).”
      • Danchenko’s lies were material because they made it harder for the FBI to vet the dossier: “The FBI ultimately devoted substantial resources attempting to investigate and corroborate the allegations contained in the Company Reports, including the reliability of DANCHENKO’s sub-sources.”
        • Danchenko’s lies about how indiscreet he was about collecting information for Steele prevented the FBI from understanding whether people, including Russia, could inject disinformation into the dossier: Accordingly, DANCHENKO’s January 24, 2017 statements (i) that he never mentioned U .K. Person-I or U .K. Investigative Firm-I to his friends or associates and (ii) that “you [the FBI] are the first people he’s told,” were knowingly and intentionally false. In truth and in fact, and as DANCHENKO well knew, DANCHENKO had informed a number of individuals about his relationship with U.K. Person-I and U.K. Investigative Firm-I. Such lies were material to the FBI’ s ongoing investigation because, among other reasons, it was important for the FBI to understand how discreet or open DANCHENKO had been with his friends and associates about his status as an employee of U .K. Investigative Firm-I, since his practices in this regard could, in tum, affect the likelihood that other individuals – including hostile foreign intelligence services – would learn of and attempt to influence DANCHENKO’s reporting for U.K. Investigative Firm1.
        • Dancheko’s lies about Charles Dolan prevented the FBI from learning that Dolan was well-connected in Russia, Dolan had ties to Hillary, and Danchenko gathered some of his information using access obtained through Dolan:  DANCHENKO’s lies denying PR Executive-1 ‘s role in specific information referenced in the Company Reports were material to the FBI because, among other reasons, they deprived FBI agents and analysts of probative information concerning PR Executive-I that would have, among other things, assisted them in evaluating the credibility, reliability, and veracity of the Company Reports, including DANCHENKO’s sub-sources. In particular, PR Executive-I maintained connections to numerous people and events described in several other reports, and DANCHENKO gathered information that appeared in the Company Reports during the June Planning Trip and the October Conference. In addition, and as alleged below, certain allegations that DANCHENKO provided to U.K. Person-I, and which appeared in other Company Reports, mirrored and/or reflected information that PR Executive-I himself also had received through his own interactions with Russian nationals. As alleged below, all of these facts rendered DANCHENKO’s lies regarding PR Executive-1 ‘s role as a source of information for the Company Reports highly material to the FBI’ s ongoing investigation. [snip] PR Executive-1 ‘s role as a contributor of information to the Company Reports was highly relevant and material to the FBI’s evaluation of those reports because (a) PR Executive-I maintained pre-existing and ongoing relationships with numerous persons named or described in the Company Reports, including one of DANCHENKO’s Russian sub-sources ( detailed below), (b) PR Executive-I maintained historical and ongoing involvement in Democratic politics, which bore upon PR Executive-I’s reliability, motivations, and potential bias as a source of information for the Company Reports, and (c) DANCHENKO gathered some of the information contained in the Company Reports at events in Moscow organized by PR Executive-I and others that DANCHENKO attended at PR Executive-1 ‘s invitation. Indeed, and as alleged below, certain allegations that DANCHENKO provided to U.K. Person-I, and which appeared in the Company Reports, mirrored and/or reflected information that PR Executive-I himself also had received through his own interactions with Russian nationals.
          • Danchenko’s lies about Dolan prevented the FBI from asking whether Dolan spoke to Danchenko about the Ritz Hotel: Based on the foregoing, DANCHENKO’s lies to the FBI denying that he had communicated with PR Executive-I regarding information in the Company Reports were highly material. Had DANCHENKO accurately disclosed to FBI agents that PR Executive-I was a source for specific information in the aforementioned Company Reports regarding Campaign Manager-1 ‘s departure from the Trump campaign, see Paragraphs 45-57, supra, the FBI might have taken further investigative steps to, among other things, interview PR Executive-I about (i) the June 2016 Planning Trip, (ii) whether PR Executive-I spoke with DANCHENKO about Trump’s stay and alleged activity in the Presidential Suite of the Moscow Hotel, and (iii) PR Executive-1 ‘s interactions with General Manager-I and other Moscow Hotel staff. In sum, given that PR Executive-I was present at places and events where DANCHENKO collected information for the Company Reports, DANCHENKO’s subsequent lie about PR Executive-1 ‘s connection to the Company Reports was highly material to the FBI’ s investigation of these matters.
          • Danchenko’s lies about Dolan prevented the FBI from asking Dolan whether he knew about a Russian Diplomat being reassigned from the US Embassy: Based on the foregoing, DANCHENKO’s lies to the FBI denying that he had communicated with PR Executive-I regarding information in the Company Reports were highly material. Had DANCHENKO accurately disclosed to FBI agents that PR Executive-I was a source for specific information in the Company Reports regarding Campaign Manager-I ‘s departure from the Trump campaign, see Paragraphs 45-57, supra, the FBI might also have taken further investigative steps to, among other things, interview PR Executive-I regarding his potential knowledge of Russian Diplomat-1 ‘s departure from the United States. Such investigative steps might have assisted the FBI in resolving the above-described discrepancy between DANCHENKO and U.K. Person-I regarding the sourcing of the allegation concerning Russian Diplomat-I.
          • Danchenko’s lies about Dolan prevented the FBI from asking whether Dolan was the source for the [true] report about reasons why Paul Manafort had left the Trump campaign: Based on the foregoing, DANCHENKO’s lie to the FBI about PR Executive-I not providing information contained in the Company Reports was highly material. Had DANCHENKO accurately disclosed to FBI agents that PR Executive-I was a source for specific information in the aforementioned Company Reports regarding Campaign Manager-I’s departure from the Trump campaign, see Paragraphs 45-57, supra, the FBI might have taken further investigative steps to, among other things, interview PR Executive-I regarding his potential knowledge of additional allegations in the Company Reports regarding Russian Chief of Staff-I. Such investigative steps might have, among other things, assisted the FBI in determining whether PR Executive-I was one of DANCHENKO’s “other friends” who provided the aforementioned information regarding Putin’s firing of Russian Chief of Staff-I.
        • Danchenko’s lies about a phone call made it harder for the FBI to vet the dossier: Danchenko’s alleged lies about Millian were material because, “at all times relevant to this Indictment, the FBI continued its attempts to analyze, vet, and corroborate the information in the Company Report.”
      • The FBI took and did not take certain actions because of Danchenko’s lies: “The Company Reports, as well as information collected for the Reports by DANCHENKO, played a role in the FBI’s investigative decisions and in sworn representations that the FBI made to the Foreign Intelligence Surveillance Court throughout the relevant time period.”
        • Danchenko’s alleged lies about Millian affected both FBI’s investigative decisions and played a role in their FISA applications: They “played a key role in the FBI’s investigative decisions and in sworn representations that the FBI made to the Foreign Intelligence Surveillance Court throughout the relevant time period.”

Sources

DOJ IG Report on Carter Page

Mueller Report

October 2016 Page FISA Application

January 2017 Page FISA Application

April 2017 Page FISA Application

June 2017 Page FISA Application

Dossier vetting spreadsheet

Danchenko posts

The Igor Danchenko Indictment: Structure

John Durham May Have Made Igor Danchenko “Aggrieved” Under FISA

“Yes and No:” John Durham Confuses Networking with Intelligence Collection

Daisy-Chain: The FBI Appears to Have Asked Danchenko Whether Dolan Was a Source for Steele, Not Danchenko

Source 6A: John Durham’s Twitter Charges

John Durham: Destroying the Purported Victims to Save Them

John Durham’s Cut-and-Paste Failures — and Other Indices of Unreliability

Aleksej Gubarev Drops Lawsuit after DOJ Confirms Steele Dossier Report Naming Gubarev’s Company Came from His Employee

In Story Purporting to “Reckon” with Steele’s Baseless Insinuations, CNN Spreads Durham’s Unsubstantiated Insinuations

On CIPA and Sequestration: Durham’s Discovery Deadends

The Disinformation that Got Told: Michael Cohen Was, in Fact, Hiding Secret Communications with the Kremlin

 

The Mike Flynn Interviews, with Backup

A few weeks ago, the government turned over the backup to some Mueller interviews, including a number of Flynn interviews, at least one Steve Bannon interview, and a Corey Lewandowski one.

I’ve long been tracking the public Mike Flynn interview records (one, two, three). This post is an update incorporating, best as I could, the backup materials along with the interview reports. One primary Mueller interview may remain outstanding, along with his EDVA interviews regarding secretly being an Agent of Turkey.

Generally, the headings consist of one of three things:

  • My summary of what got included in the Mueller Report (which is helpful to see what is new to this declassification)
  • “Missing” and/or EDVA, which is a reflection of what Bijan Kian’s lawyers claimed they had gotten by June 2019
  • New, with a description of the content

The backup fleshes out what Flynn was questioned about, and what remains sensitive. The government has released maybe half of the emails and pictures that Flynn was questioned about in interviews, based on the references to such things in the interviews themselves. In general, if BuzzFeed got the backup material, the link I’ve added should link directly to that item.

But key kinds of materials were withheld. For example, the following were withheld:

  • Communications surrounding a 2016 Egyptian meeting (which Mueller suspected may have involved a bribe)
  • A Kushner Blueprint for Russia sent to Flynn on January 1, 2017
  • To the extent Flynn was shown it in interviews, the David Ignatius story reporting the Kislyak calls; that was generally withheld both for classification but also ongoing investigation (reflecting John Durham’s leak investigation into it)
  • A January 5, 2017 email referencing the Logan Act
  • An email about the Steele dossier
  • A July 24, 2016 email involving Flynn making it clear he recognized Russia had hacked the DNC; Flynn would equivocate on the subject in the weeks after that

1. November 16, 2017: Trump appoint Flynn as NSA, first call with Putin, Israel vote, communications with Kislyak, December Kislyak call

Mueller attendees: James Quarles, Aaron Zebley, Brandon Van Grack, Zainab Ahmad

Entered: January 5, 2018

Nine months after Mike Flynn got fired, ostensibly for lying to the Vice President, Mueller’s team invited him for a mulligan on his January 24, 2017 interview in which he lied several times to the FBI. In advance discussions about that interview, Brandon Van Grack alerted Flynn’s lawyers that there were likely things Mueller’s team knew that Flynn’s did not.

There is information that you or your client might not be aware of. From where we’re sitting, there might still be value in sitting down with your client. We have a good sense of what Flynn knows and what Flynn doesn’t know.

As one indication of how badly Flynn had misled his attorneys, Rob Kelner expressed surprise that Flynn might be exposed for false statements from his interview at the White House.

Frankly, we are surprised by that. That is not consistent with what we have learned from press reports and other sources.

Zainab Ahmad warned,

You don’t know everything he knows.

This first interview, then, might be considered a test, whether Flynn was willing to tell the truth about his actions and those of Trump’s associates. He failed.

The interview front-loaded general information (how he came to work for Trump, though even there, later interviews would offer slightly different details as to timing), and questions about topics that Flynn was a tangential participant in — the DNC emails, the June 9 meeting, meetings with Egypt and Mueller’s suspicion that Trump got $10 million from them, ties with Qatar, Manafort’s role in the platform change, Brad Parscale’s operation, an the hush hush meeting with the UAE.

Only after asking questions about all that did Mueller’s team ask Flynn the same questions the FBI had asked him nine months earlier. He answered the questions the same way. He lied to hide the specific requests of Russia on Egypt’s UN proposal and he lied about whether he had discussed sanctions with Sergey Kislyak and discussed them with the Transition team at Mar-a-Lago with Trump.

Topics:

  • How he came to work for Trump
  • The $10 million campaign contribution (Mueller suspected it to be sourced from Egypt)
  • Hillary’s emails (Flynn lied and claimed he had never looked for them)
  • The DNC emails (Flynn lied about discussions about the topic)
  • No knowledge about June 9 meeting
  • The meeting with Abdel Fattah el-Sisi (and those suspected of brokering it); Flynn later admitted he met with Egyptians on more than one occasion
  • A reference to Qatar
  • Flynn’s views about Manafort, including the platform change
  • Flynn’s views on Russia
  • Flynn’s review of Parscale’s operations
  • Early congratulation calls, including Egypt, a botched one to Taiwan, and the first call with Putin
  • The meeting with Kislyak (Flynn claimed a back channel did not come up)
  • The call with Sergey Kislyak on 12/6/16, which he always insisted he didn’t remember, and a follow-up on December 7
  • The UAE meeting in NY
  • The UN vote (Flynn repeated his lies from earlier that year, twice)
  • The sanctions discussion (Flynn repeated his lies from earlier that year)

Backup

  • 9/15/16 email to Bannon regarding Egypt (A)
  • 12/7/16 email RE: Russian Ambassador Sergey Kislyak (regarding deferring all conversations until after inauguration) (B and C)
  • 3/27/2017 NYT article describing Kushner meeting (D)
  • 12/12/16 meeting keep UAE meeting to small circle (E)
  • Another email on Egypt

That night, Flynn’s lawyers told him he had botched the interview.

That same evening, after concluding the first proffer, we returned to the Covington offices where my attorneys told me that the first day’s proffer did not go well and then proceeded to walk me through a litany of conceivable charges I was facing and told me that I was looking at the possibility of “fifteen years in prison.”

2, November 17, 2017: Israel vote, December Kislyak call, especially comms with Mar a Lago, re Ignatius Flynn said he had not talked sanctions, Mar a Lago with Trump, Flynn’s last meeting with Trump, “we’ll take care of you”

Mueller attendees: James Quarles, Aaron Zebley, Brandon Van Grack, Zainab Ahmad (Zebley and Quarles in and out)

Entered: 1/5/18

According to Flynn, overnight his attorneys coached him on language to

“get through” the next day’s proffer and satisfy the special counsel.

Flynn shaded the truth in his November 17 interview — about the Trump Transitions contacts with their predecessors, about his discussions about sanctions with KT McFarland and Steve Bannon, about why he left no written record of having discussed sanctions. Still, it was a better interview, and after being confronted with just a selection of the communications that had recorded these communications in real time, his story edged closer to the truth, even while denying things (such as the explicit nod to their calls from Kislyak) that were in FISA transcripts. Among the things Flynn admitted that day was that he “knew he got involved in U.S. policy when he called KISLYAK.”

In addition, Flynn provided Mueller’s team what must have been important insight. He said that when he resigned, “TRUMP was tired and visibly shaken or upset.” But then when Sean Spicer explained his resignation, “It bugged FLYNN that SPICER said he (FLYNN) had been untruthful.” Flynn’s sense of betrayal would, at times, be powerful motivation for his cooperation with Mueller, until it wasn’t anymore.

Topics:

  • Calls with Kislyak, including January 12 one, (several iterations); Flynn lies abt Bossert speaking with Monaco, claims not to remember specifics of discussion with McFarland, makes excuses for not including sanctions in email, then backtracked somewhat, makes excuse for not telling Trump, claims he didn’t discuss it with Bannon
  • Flynn’s lies to others, including knights of the round table
  • His first FBI interview (several iterations)
  • Covington asks who he spoke with after the call, includes people (like Ted Gistaro) whom he didn’t tell
  • His resignation

Backup

  • 12/29/16 Text messages to Sara Flaherty (possible some withheld on b3) (A)
  • Some exhibit (possibly call records) eliciting a discussion about whether he and Michael Ledeen spoke about sanctions (B)
  • 12/30/16 email from McFarland relaying the talking points (C)
  • D [possibly comms from after he spoke with Kislyak]
  • 12/31/16 Keith Kellogg email (E)
  • Probably Ignatius article

Ongoing: Individual words redacted to hide an investigation into Ignatius’ source

3. November 20, 2017: Whether he told others at MAL, response to Ignatius

Mueller attendees: James Quarles, Aaron Zebley, Brandon Van Grack, Zainab Ahmad

Entered : 1/5/18

On November 20, Flynn inched still closer to the truth about what happened during the Transition period. He clarified a key detail about the $10 million infusion of cash that, Mueller suspected, had come from Egypt. Flynn described how Trump blamed him for not informing Trump that Vladimir Putin had been the first to call Trump after inauguration — something Trump had told Jim Comey.

And after being shown texts of the communications he had with Mar-a-Lago surrounding his calls with Sergey Kislyak, he effectively admitted that he had coordinated with Mar-a-Lago. There were still gaps. He had no explanation for why there was a meeting between him, KT McFarland, and Trump at 5PM, which would have been shortly after his call with Kislyak. Flynn inched closer to admitting that he and McFarland had agreed to leave mention of sanctions out of his text summarizing the call. And he admitted that he may have spoken about the sanctions discussion in some meetings with Steve Bannon at the latter’s townhome after the calls.

Once Flynn’s admissions about his own actions got closer to the truth, Mueller’s team asked him questions about Jared Kushner’s actions, especially a secret meeting with Mohammed bin Zayed in mid-December 2016.

Topics:

  • The Infusion of cash (correcting earlier explanation)
  • Theresa May arrival (included in Comey’s notes)
  • Calls with Kislyak (including texts with Flaherty)
  • Texts excluding sanction discussion
  • Meeting with Trump at 5PM on 12/29
  • Meeting with Bannon
  • Kushner’s blueprint for Russia
  • McFarland January 5, 2017 email
  • January 6, 2017 ICA briefing
  • Dossier
  • Cohen’s Ukraine plan
  • Someone who also believed CIA was bloated (and discussed UAE and Libya)
  • Seychelles meeting
  • Egypt package

Backup

Classified: Rex Tillerson? Some details about early January

Ongoing: Two b7A paragraphs in follow-up to Egypt package

4. November 21, 2017: Whether he told others at MAL, response to Ignatius, meeting with Trump [Missing]

Mueller attendees: James Quarles, Aaron Zebley, Brandon Van Grack, Zainab Ahmad; Mueller, briefly; Zebley left

Entered: 1/5/18

Having given Mueller’s team a passable explanation for his own actions, they focused the last interview on fine tuning that — particularly his admission to discussing the sanctions with Bannon — while getting him to talk about all the times he had been thrown under the bus by those who were in the know on the sanctions discussion, Bannon and McFarland.

Mueller’s team also got him to go over Kushner’s involvement in foreign policy, the relationship with Egypt, and the UAE meeting.

Topics:

  • Logan Act
  • Bannon’s townhouse (Bannon already knew content of conversation)
  • Knights of the round table meeting, Bannon and McFarland silent
  • Another instance of being thrown under the bus
  • Kushner on Mexico
  • Egypt
  • Rick Gerson and Tony Blair, the UAE meeting (April 2017 Flynn contact with Gerson)

Backup [large b4 redactions likely hiding a bunch]

  • Email on el-Sisi meeting
  • 9/16/16 email between Ivanka and Phares
  • Photo of Rick Gerson
  • Kushner email on keeping meeting small

Large b4 redactions (trade secrets), addressing two topics, which leads into Kushner on foreign policy.

5. November 29, 2017: Peter Smith [Missing]

Mueller attendees: Brandon Van Grack, Zainab Ahmad

Entered: 1/5/18

The November 29, 2017 meeting, when the two sides were already discussing a plea deal, seems to be focused on answering questions that Mueller’s team didn’t know the answers to, unlike the prior proffers. This covered some of Flynn’s other legal exposure (such as his non-disclosure of foreign travel on his clearance form and his financial disclosure), just bits about his ties with Turkish officials, WikiLeaks and the Peter Smith attempt to find Hillary’s email, as well as other election year digital activities.

The interview ended with a discussion about language in a draft statement of offense admitting that Flynn had initially not told the government that he and Steve Bannon discussed sanctions. That language was cut from the final statement of offense, but it provides important background to interviews with others, including McFarland and Bannon.

Topics:

  • Op-ed on Libya relying on WikiLeaks docs
  • Discussions about WikiLeaks having Hillary’s emails, no direct contact
  • WikiLeaks following Flynn starting in October or November 2016, DMs him on 12/5/16
  • An NSC hire
  • Flynn notes on index cards
  • Meeting with Turkish officials, including sitting with Foreign Minister at Trump International Hotel in January
  • More Turkish
  • Svetlana Lokhova, including congratulations sent after election
  • Jobs after DIA
  • Meetings Flynn set up
  • Foreign travel not included in SF-86, financial disclosure
  • Peter Smith (original contact cyber business), probably downplaying extent of their contacts
  • Rick Gates during transition
  • Putin congratulatory phone call (possibly different details than original version), asked about a “signal”
  • Rick Gerson notes on 12/14/16
  • WikiStrat
  • PsyGroup
  • Donbass
  • Meeting with Susan Rice
  • Strong dollar
  • Bannon townhouse language in statement of offense

Backup

  • 10/6/16 Curtis Ellis email, possibly relating to an op-ed on Libya, using classified information that had shown up on WikiLeaks
  • Possible b7A
  • Possible SF-86 and financial disclosure form
  • 12/4/16 notebook entries re Rick Gerson meeting
  • Possible media report that Trump asked him about strong dollar

b7E redactions

Ongoing: Four b7A redactions in discussion of what he did after he left DIA.

6. January 11, 2018: November 30 meeting with Kislyak [Missing]

Mueller attendees: Brandon Van Grack, James Quarles

Entered: 2/22/18

Starts with admonishment.

In Flynn’s first interview after pleading guilty, Mueller’s team asked him more generic details — about how he used his classified phone, whether he used encrypted apps, whether he knew about the Seychelles meeting. It’s not clear he told truth about those questions or not, but he did provide other useful information, such as how often Erik Prince was at Transition headquarters.

Topics:

  • Classified emails
  • Flynn claims he only used classified phone with Susan Rice
  • Encrypted apps (he preferred Signal), especially whether Bannon and Kushner used them
  • Kislyak meeting, starting w/12/1/16 (obtained his bio), still claimed no back channel, did not recall sanctions discussion
  • UN calls (including Nikki Haley’s, Bannon’s involvement)
  • Rebuff of Manafort’s 1/15/17 email (Manafort at National Prayer Breakfast)
  • UAE meeting
  • Another discussion of fire-the-CIA guy (could be Prince)
  • Prince at Trump Tower on daily basis, no knowledge of Seychelles
  • Kevin Harrington: Russia trying to usurp US role
  • Gitmo transfer
  • Parscale meeting in September 2016
  • Whom he has heard from post-plea

Backup:

Ongoing: Two b7A paragraphs between discussion of Manafort and Egyptian.

7. January 19, 2018: Flynn did not have specific recollection about telling POTUS on January 3, 2017

Mueller attendees: Brandon Van Grack, James Quarles, Andrew Goldstein

Entered: 6/21/18 [note: several other 302s have an entry date of 5/21, so this may be a typo]

In Flynn’s January 19, 2018 interview, he protected the President. He said, over and over, that he had no idea if he had spoken directly with Trump about sanctions, or even what he had said to KT McFarland. The Mueller team did not prompt him with information that might have been useful to force him to admit that he had told Trump.

Flynn did, however, admit that Trump had a better understanding of the timeline of Flynn’s calls with Kislyak than Flynn did, including a probable reference to Trump’s involvement in the December 22 call about Egypt.

This 302 was not finalized until June 21, a testament to how important Flynn’s claim not to remember discussing this with Trump was to Mueller’s case.

Topics:

  • Contacts with Mar-a-Lago, claims he assumed McFarland talked to Priebus and Bannon
  • Meeting with Bannon on 1/1/17
  • Whether it came up on 1/3/17
  • Ignatius, now says he’s worried he broke the law
  • His interview (with b5 that may have covered discussion within WH afterwards)
  • Trump corrects his date
  • Whether Trump specified calls with Daily Caller
  • Correcting Nikki Haley on Crimea

Backup:

  • Possibly Ignatius article

8. January 24, 2018: [New] Questions about George Nader and Erik Prince

Mueller attendees: Brandon Van Grack, Zainab Ahmad

Entered: 2/22/18

This interview took place in the wake of the George Nader detention at the airport, and reflects the first review of Nader’s phone. Prince was also a focus.

Topics:

  • Whether he recognized Nader
  • How Flynn arrived to the MbZ meeting and what was discussed
  • Whether Russia was discussed
  • Flynn’s meeting with Rick Gerson in December (which Tony Blair attended)
  • Erik Prince’s plans to outsource the IC and whether he was getting $$ from UAE
  • Prince’s presence in Trump Tower after the election
  • Extended b7A discussion

Backup:

9. April 25, 2018: Peter Smith

Mueller attendees: Brandon Van Grack, Zainab Ahmad, Andrew Weissmann, Aaron Zelinsky

Entered: 5/21/18

On April 25, 2018, after most Trump associates had had their first interviews and the Mueller team had begun to unravel Roger Stone’s role, Flynn had his first interview discussing those issues. It appears he shaded the truth, disclaiming to have been certain that Russia had hacked the DNC and disclaiming awareness of all the discussions in the campaign about WikiLeaks.

Nevertheless, Flynn likely said things at this interview that betrayed knowledge of far more, even if he didn’t understand that.

Topics:

  • How he got involved in the campaign, including discussions of Russia and Sam Clovis’ role in it, dates involvement from 2/22/16; officially joined June 2016
  • RT trip
  • Regular contact with retired military officer, including email 6/29/16
  • DNC hack, Flynn claims he was uncertain abt attribution [break to walk Flynn through specific dates], Ledeen on missing emails, no memory of Stone, contact with FBI
  • Debate prep included “leverage” discussions about Assange, Flynn did not know under indictment (??)

Backup:

10. May 1, 2018: Peter Smith

Mueller attendees: Brandon Van Grack, Aaron Zelinsky

Entered: 5/21/18

In this interview, Stone prosecutor Aaron Zelinsky tried to pinpoint Flynn’s vague memories from August 2016, specifically regarding his first flight with the campaign on August 3, 2016, in the middle of a period when Stone was in close contact with the campaign about WikiLeaks. In this interview, Flynn admitted that he had much higher certainty that Russia had done the hack than he had said weeks earlier.

Mueller’s team also asked him what amount to counterintelligence questions and started to figure out who in the FBI was undermining their case in Flynn’s name.

The meeting ended with a question about who used his IC badge to enter a classified facility on April 3, 2017.

Topics:

  • First trip on plane was 8/3/16, to Jacksonville, Flynn’s own assessment would be high likelihood Russia did the hack
  • Russian born investment capitalist talked about Clinton’s emails a lot
  • WikiLeaks reaches out to Flynn on 6/22/16 via publisher (recurring)
  • Flynn email 7/24/16 about attribution showing certainty–he walked back his certainty by August 3
  • Series of emails with someone military who moved to DIA, around first meeting with Manafort on 6/23/16
  • Question abt bots and social media
  • Email 11/2/16 may have clicked on the link
  • Trump’s 7/27/16 comment, specifically asked if Stone put it in his head
  • Contact in USDI
  • Retired general
  • 6/29/16 email from someone he was respectful of
  • Email 9/10/16 about speaking to Russia on Syria, someone pro-Russian
  • Dmitri Simes
  • Email sent to someone he met in August 2015 on 8/20/16
  • Contacts in FBI
  • Digital response team v. Parscales
  • Email 10/9/16 with link to Podesta
  • Extended discussion of Erik Prince, including transition
  • DIA visit on 4/3/17 (discussion about his IC badge)

Backup

Ongoing: Two b7A paragraphs abt discreet subject/person between discussion about WikiLeaks and about Prince.

11. May 4, 2018: [New: Manafort, Ledeen, and badging]

Mueller attendees: Brandon Van Grack, Aaron Zelinsky

Entered: 5/21/18

The next meeting started with the unexplained use of his badge (Flynn claimed he still hadn’t found it). It hit on his efforts to find Hillary’s emails with Barbara Ledeen, their search for the emails on servers in Ukraine, and a long call Flynn had with Manafort in June, when the WikiLeaks effort first began.

Topics:

  • Use of his badge 4/3/17
  • Barbara Ledeen, including password protected email on 10/29/16
  • Servers in Ukraine
  • Micro-targeting
  • Hour-long call with Manafort on 6/23/16; first met Manafort on 6/30/16
  • The dossier and ICA briefing
  • Transition meeting, some Captain sharing information, and KT McFarland

Backup:

12. May 17, 2018: [New: Ledeen’s tampering]

Mueller attendees: Brandon Van Grack, Zainab Ahmad

Entered: 6/1/18

Most of this meeting focused on ways that Flynn’s people were undermining the investigation, with a focus on Barbara Ledeen and Sara Carter (who published several false stories about the investigation). It also returned to the issue of what secure communications he used.

Topics:

  • Ledeen’s probes of the investigation
  • Sarah Carter’s propaganda (starting with possible immunity on 3/30/16)
  • Discussions about the investigation
  • Secure communications

Backup:

13. May 23, 2018:

Mueller attendees: Brandon Van Grack, Zainab Ahmad

Entered: 5/29/18

While this meeting returned focus to two key prongs of the Middle Eastern part of this investigation, UAE and Qatar, it also probed more about Flynn’s current job and the FBI agents tracking his case.

Topics:

  • Qatar
  • 12/12/16 Trump Tower meeting, possibly with QIA
  • His then-current consulting gig
  • FBI agents, including retired, who are tracking his case

Backup

  • Picture from QIA meeting

b3: An entire discussion covered by b3

14. June 13, 2018: [EDVA, Missing]

15. June 14, 2018: [EDVA, Missing]

16. June 25, 2018: [EDVA, Missing]

17. July 26, 2018, [EDVA, Missing, possibly two 302s]

18. September 17, 2018: [New: someone else’s tampering, probably Derek Harvey]

Mueller attendees: Brandon Van Grack, Zainab Ahmad

Entered: 9/28/18

The entirety of this, Flynn’s last meeting with the Mueller team, seems to focus on the role of Derek Harvey, whom Flynn hired into the NSC, and who played a key role in helping Devin Nunes undermine the entire investigation.

Topics:

  • Relationship with someone on HPSCI, probably Derek Harvey

September 26, 2018: Proffer response on meetings with Foresman

January 28, 2019: [EDVA Missing]

February 28, 2019: EDVA

April 5, 2019: [EDVA Missing]

June 6, 2019: EDVA — Flynn blows up his plea deal

Flashbacks to the 2015 Campaign

Katy Tur at SXSW
[h/t nrkbeta Attribution-ShareAlike 2.0 Generic (CC BY-SA 2.0) ]

Several years ago, I got Mrs Dr Peterr Katy Tur’s book Unbelievable: My Front-Row Seat to the Craziest Campaign in American History. Tur had been the NBC reporter assigned to the Trump campaign in 2015 and 2016, and listening to the impeachment coverage yesterday and the coverage this morning, one episode she recounted in the book came flashing back . . .

In Dec 2015, three days before Trump announced his pledge to institute a Muslim travel ban, Trump got rattled at a rally in Raleigh NC where protesters coordinated their efforts and threw him off his game, interrupting his speech every couple of minutes from different parts of the arena. Disgusted, Trump abruptly left the podium and started shaking hands offstage, and Tur sent out a simple tweet describing what had happened.

Right before lunch the next day, Hope Hicks wrote her to say “Katy, Mr. Trump thought your tweets from last night were disgraceful. Not nice! Best, Hope.” Shortly thereafter, the media gets the word about the travel ban Trump intended to announce that night, and that becomes the big story of the day with Katy doing liveshots all afternoon. That evening, before a rally inside the USS Yorktown (an aircraft carrier-turned-museum in Charleston harbor), Trump blasted her with four attack tweets in the span of four minutes.

Tur says the rally’s specific location was a surprise, in that it wasn’t held on the carrier deck but inside the belly of the ship, with the media crowded into a pen.

Yes, we are in a pen: a makeshift enclosure made of bicycle racks and jammed full of desks, reporters, and camera equipment. We’re in the middle of the carrier, slammed against the right side wall. As usual, almost all of Trump’s supporters are white and a lot of them are looking at us, not exactly kindly. The campaign and Secret Service force us to stay inside the pen while Trump is onstage. They even discourage bathroom breaks. None of them have a good explanation for why we’re kept separate from the supporters. Are we the threat or are they?

Trump starts his rambling speech, and the crowd eats it up. Then Trump opens up on the media.

“The mainstream media,” Trump says. “These people back here, they’re the worst. They are so dishonest.”

Hoots and hollers.

And then I hear my name.

“She’s back there, little Katy. She’s back there.”

Trump then calls her a liar several times, and a third rate reporter several times as well, before pivoting to a more general attack on the media. Finally, once he’s got the crowd sufficiently whipped up, he formally announces the Muslim ban, and the crowd which she described earlier as looking at her like “a large animal, angry and unchained” went nuts.

She goes live with Chris Matthews as Trump leaves the stage, and when she’s done with that, Chris Hayes takes over and wants to keep her on the air for the lead story on his show that followed Matthews’.

[Trump] supporters are taking their time to leave. They’re still whipped up. I know someone is going to start yelling at me as soon as I start talking. So I do what I always do. I find the pinhole deep in the back of the lens and I tune everything else out.

A couple of minutes later, I’m done. The crowd that had gathered behind my live shot is gone except for a few stragglers, yelling at me. They’re five feet away, held back by those lousy bicycle racks. A Trump staffer shoos them away. MSNBC has cleared me and my bosses want [her cameraman/sound tech] Anthony and me to get out of there as quickly as we can. I don’t quite understand why until we pack up and start to head out. A Trump staffer stops me and says “These guys are going to walk you out.”

I look over and see two Secret Service agents. Thank goodness. They walk Anthony and me along the gangway back to our car. It’s pitch black and I’m nervous. We’re parked with the crowd.

Once we’re moving, I take a look at my phone. My mom has called. And called. And called. I dial her back. “Are you okay? Where are you staying? Can someone stay with you? You need security!? She is crying. And it hits me.

I’m a target.

On that day in December 2015, the security professionals of the US Secret Service recognized that Trump was dangerously inciting a mob, and stepped in to protect the target he had singled out.

On January 6, 2021, Trump again incited a mob, and this time there was no one to stop them.

Russian Flight: The Timing of the Assange Charges

The Department of Justice charged Julian Assange when they did to stave off an attempt to help Assange flee to Russia.

That’s one important takeaway from the date of the complaint, December 21, 2017. Days earlier, Ecuador had submitted diplomatic credentials for Assange to the British government, with the intent that he would move (or, according to the less reliable Guardian, be secretly exfiltrated) to Russia under protection of diplomatic status.

Ecuador last Dec. 19 approved a “special designation in favor of Mr. Julian Assange so that he can carry out functions at the Ecuadorean Embassy in Russia,” according to the letter written to opposition legislator Paola Vintimilla.

“Special designation” refers to the Ecuadorean president’s right to name political allies to a fixed number of diplomatic posts even if they are not career diplomats.

But Britain’s Foreign Office in a Dec. 21 note said it did not accept Assange as a diplomat and that it did not “consider that Mr. Assange enjoys any type of privileges and immunities under the Vienna Convention,” reads the letter, citing a British diplomatic note.

Ecuador abandoned its decision shortly after, according to the letter.

British authorities have said they will arrest Assange if he leaves the embassy, meaning he would have needed to be recognized as a diplomat in order to travel to Moscow.

The US finalized the complaint the same day the UK rejected the Ecuadorian request (though the accompanying 26-page affidavit suggests it been in the works for some time). The next day the US sent a formal extradition warrant to the UK. All this happened under dramatically increased (and visible) surveillance from Ecuador’s security contractor, UC Global; Assange boosters have tried to spin this attempt as a US kidnapping attempt, which is presumably what they would have called a failed exfiltration attempt.

The timing of two of the other sets of charges against Assange can also be fairly readily explained. Assange was formally indicted on March 6, 2018, the day before the 8-year statute of limitations on the CFAA charge would expire. The most recent superseding indictment, obtained on June 24, 2020, expanded the CFAA conspiracy charge through 2015, which seems to be another effort to expand the conspiracy before statutes toll. The next overt acts in WikiLeaks’ efforts to undermine the US came in March and April 2016. Unless Assange is pardoned and released (as I’ve noted, a pardon may not have the effect Assange boosters want it to), I think it highly likely DOJ will supersede again after inauguration to include, at a minimum, the Vault 7 publication, and probably some overt acts tied to the 2016 election interference. Depending on UK willingness to add to the total charges, the US might well add foreign agent charges they’ve alluded to.

Only the timing of the indictment adding the Espionage charges on May 23, 2019 can’t be readily explained (though it came in the wake of the Mueller Report and the larger Russian investigation which is, per the SSCI Report, what led to a better understanding of the degree to which Russia had “co-opted” WikiLeaks).

It is a testament to the power of WikiLeaks’ propaganda efforts that the entire focus on Julian Assange’s prosecution has been on false claims about why DOJ decided to prosecute him while Trump was President and not on the specific timing of the first charge against him, which ties it to Assange’s relationship with Russia.

Quite honestly, the US probably would have been far better off had Assange’s attempt to flee to Russia succeeded. That would have made clear even to the dead-enders that Assange had become little more than a Russian tool, and thereby diminished WikiLeaks’ allure and efficacy as a cover for leaks going forward. Instead, they’ve made of Assange a martyr about whom most journalism organizations in the world are enthusiastically repeating false propaganda.