The Peaceful Transfer of Power: What President Reagan Called, “Nothing Less than a Miracle”

I’ve caught up to all of you in the States watching the first January 6 Committee hearing (my Twitter commentary while watching the video is here).

I think the hearing was an effective scene-setter, laying out information in a coherent narrative.

Perhaps the most striking part of the hearing was the degree to which, aside from the two live witnesses, Capitol Police Officer Carolyn Edwards and Nick Quested, the hearing relied exclusively on Republicans to make their case, with clips from:

  • Jason Miller
  • Alex Cannon
  • Matt Morgan
  • Bill Barr
  • Ivanka
  • Mike Pence (from a video appearance at the Federalist Society)
  • Greg Jacob
  • Steve Bannon
  • General Mark Milley
  • Sean Hannity and Kayleigh McEnany
  • Jared
  • Jeremy Bertino
  • Enrique Tarrio
  • Stewart Rhodes
  • A number of Jan 6 defendants, including Eric Barber

If I’m not mistaken, Thomas Jefferson was the only Democratic President named, but a slew of Republican Presidents were named (George W Bush was not, but Gerald Ford was).

There was plenty of shaming, including calling out Jeffrey Clark and Scott Perry for refusing to cooperate and noting that Kevin McCarthy was scared.

The clip of Jared accusing Pat Cipollone of “whining” when he threatened to quit may make it more likely to get the former White House Counsel’s testimony.

In short, this was directed at Republicans and relied on Republicans to make the case for democracy.

In that frame, I found the closing words of Liz Cheney’s opening statement to be the most effective messaging.

I ask you to think of the scene in our Capitol Rotunda on the night of January 6. There in a sacred space in our Constitutional Republic. The place where our Presidents lie in state. Watched over by statues of Washington and Jefferson, Lincoln and Grant, Eisenhower, Ford, and Reagan. Against every wall that night encircling the room, there were SWAT teams. Men and women in tactical gear, with long guns, deployed inside our Capitol building. There in the Rotunda these brave men and women rested beneath paintings depicting the earliest scenes of our Republic, including one painted in 1824, depicting George Washington resigning his commission, voluntarily relinquishing power, handing control of the Continental Army back to Congress. With this noble act Washington set the indispensable example of the peaceful transfer of power, what President Reagan called, nothing less than a miracle. The sacred obligation to defend the peaceful transfer of power has been honored by every American President, except one. As Americans, we all have a duty to ensure that what happened on January 6 never happens again. To set aside partisan battles. To stand together, to perpetuate and preserve our great Republic.

With this speech (and the imagery), Cheney attempted to invoke the mantle of Reagan, her party’s (and our shared generation’s) political icon. In doing so, she attempted to make democracy a religion again, something worth defending.

At the very least, she provided some mythology on which she will rebuild her party.

“Something Like This Has 0 Repercussions if You Mess Up:” John Durham Debunked the Alfa Bank Debunkery

As you know, John Durham failed spectacularly in trying to use a false statement charge against Michael Sussmann to cement a wild conspiracy theory against the Democrats.

But Durham did succeed in one thing (though you wouldn’t know it from some of the reporting from the trial): He utterly discredited the FBI investigation into the Alfa Bank allegations. Lead prosecutor Andrew DeFilippis even conceded as much in his closing argument.

Now, ladies and gentlemen, you have heard testimony about how the FBI handled this investigation. And, ladies and gentlemen, you’ve seen that the FBI didn’t necessarily do everything right here. They missed opportunities. They made mistakes. They even kept information from themselves.

That’s a fairly stunning concession from DeFilippis. After all, DeFilippis asked the guy who was responsible for some of the worst failures in the investigation, Scott Hellman, to be his expert witness, even though Hellman, by his own admission, only “kn[e]w the basics” of the DNS look-ups at the heart of the investigation. Along with Nate Batty, Hellman wrote an analysis of the Alfa Bank white paper in less than a day that:

  • Misstated the methodology behind the white paper
  • Blew off a reference to “global nonpublic DNS activity” that should have been a tip-off about the kinds of people behind the white paper
  • Falsely claimed that the anomaly had only started three weeks before the white paper when in fact it went back months
  • Asserted that there was no evidence of a hack even though a hack is one of the hypotheses presented in the white paper for the anomaly at Spectrum Health (Spectrum itself said the look-ups were the result of a misconfigured application)

Later testimony showed that, after speaking to Hellman and before even checking whois records, the Chicago-based agent who had a lead role in the investigation told a supervisor that “we’re leaning towards this being a false server.”

Within hours, Miami-based agents had confirmed with Cendyn that was false.

In spite of being so egregiously misled from the start by the guys in Cyber, agent Curtis Heide testified in cross-examination by Sussman’s attorney, Sean Berkowitz, that Hellman’s analysis was one of the four things that he believed supported a finding that the anomaly was not substantiated.

Q. Okay. I think near the end of your examination by Mr. Algor he questioned you about your basis for concluding that there was — that the allegations were unsubstantiated. And I think you gave four reasons. I’m going to run through them. If there’s more, that’s okay. Number one, you said the assessment done by Agents Hellman and Batty. Correct?

A. Yes.

Q. Two, the review of the logs. Correct?

A. Yes.

Q. Three, the Mandiant conclusion. Correct?

A. Yes.

Q. And four, the discussions with Spectrum Health about the TOR node. Correct?

A. Yes.

Q. Anything else that you can recall, sir, as to why it was that your investigation, or rather the investigation that you oversaw, suggested that the allegations were unsubstantiated?

A. The only other thing I can think of would be my training and experience with — relating to Russia and cyber investigations.

Q. And is there anything in particular about that that you recall today?

A. With respect to the white paper, it didn’t — when I read through it initially, I had several questions, and it didn’t appear to be consistent with Russian TTPs.

Another thing Heide relied on was the analysis from Mandiant, which Alfa Bank hired to investigate after NYT reached out. According to Franklin Foer’s story, Lichtblau reached out to Alfa on September 21, after Sussmann had given the FBI a heads up but before the FBI asked Lichtblau to hold the story on September 26, so in the window when the FBI had a chance — but failed — to protect the investigation.

One of the truly insane parts of this investigation, by the way — which was conducted entirely during the pre-election window when overt actions were prohibited — was that FBI big-footed to Cendyn and Listrak before sending NSLs to them. And by that point, Alfa Bank was calling the FBI.

A report that was not explained amid the primary resources from the investigation, but which was concluded by October 3, reveals that Chicago’s conclusion was almost entirely based on what Alfa told the FBI and Mandiant.

There was nothing in the case documentation until a 302 for a March 27, 2017 interview done in association with Alfa’s 2017 claims of spoofed DNS traffic (the interview may have been done with Kirkland and Ellis) that documented that, when Mandiant arrived the previous year to investigate, there were no logs to investigate.

Indeed, Heide testified on cross-examination that he had never learned of that fact. At all.

Q. And were you aware, while you were doing the investigation, that Mandiant, when it went to talk to AlfaBank to look into these allegations, did not have any historical data, that Alfa-Bank did not provide any historical data to Mandiant? Did you know that?

A. No

We now know that at a time when “Executives at the highest level of ALFA BANK leadership” had been hoping to “exonerate them[selves]” in 2017, Petr Aven had already started acting on specific directives from Vladimir Putin, including trying to open a back channel to Trump.

Plus, at least as far as Listrak could determine, while the marketing server had sent materials to Spectrum, it had never sent anything to Alfa Bank. The stated explanation that this was spam, then, conflicts with what FBI was seeing in the logs.

As for Spectrum — another of the reasons Heide pointed to — there’s no evidence of anyone reaching out to them (as compared to interactions with agents in Philadelphia and Miami who reached out to Listrak and Cendyn, respectively).

It’s true that the anomaly at Spectrum was not a Tor node (something that researchers came to understand themselves around the time Sussmann shared the allegations with the FBI). But it’s also true that, per Cendyn (which only looked back a month), the identified IP address at Spectrum was reaching out to the Trump server.

The IP address in question showed up in traffic that may be associated with Chinese hacking.

This then might have corroborated the hypothesis, from the white paper, of a hack of Spectrum, but by this point, Hellman had long before decided there was no evidence of a hack and this was, “just garbage.”

That leaves the logs, Heide’s fourth reason for believing FBI had debunked the Alfa Bank allegations. As far as the logs in question, former agent Allison Sands (who was assigned the investigation as a brand new case agent) told one of the tech people on September 26 that, “the end user [possibly Cendyn] is willing to provide logs but they dont have what we need.” Cendyn did share details of their own spam filter, which wouldn’t address the DNS look-ups themselves.

Then, on October 12, Sands told Heide that,

the ‘logs’ we got from Listrak were not network logs

they basically just confirm that trump org is one of their email clients, but they dont show destination email addresses or IPs or anything that we can use to[ ]determine any communications

[snip]

it was two excel spreadsheets

that was all we got

The FBI did get something. Sands testified that the FBI obtained upwards of 600,000 records (she described obtaining records from Cendyn, Listrak, and GoDaddy, but not Spectrum or Alfa Bank). But it’s not clear how useful those records really were. There’s a reference to the “take” elsewhere (see below), and redacted entries that look like intelligence targeting, plus a reference to an OGA partner reporting “no attempts.” (Here’s a reference to the OGA analysis that is redacted in other versions of the same email chain.) So it seems any useful logs came from another agency. But if that’s right, it would be targeted overseas.

In trial testimony, Sands described that her task was to prove that the allegation wasn’t true, not to explain what the anomaly was.

I knew still I had to rebuild from scratch and prove that this allegation wasn’t true.

In real time, too, she saw her task as disproving that emails had been shared, not even disproving that covert communication had occurred.

I have a few more logs to definitely prove there are no emails, and then Im putting it to bed

That’s a particularly problematic description given that the FBI had been told via other channels that there was some activity reflecting more than DNS look-ups.

That leaves, according to Heide’s judgement, just the observation that the DNS traffic was not consistent with known Russian techniques. Newbie agent Sands said something similar to Chris Trifiletti, Joffe’s handler and apparently sensitive for some other reasons. In response, he mused about whether Russia was “trying other things now that look more non traditional.”

We don’t know the answer to that, because the FBI didn’t try to figure it out.

Scott Hellman, the cyber agent who insisted at every opportunity he got that this was garbage was wrong about how long the anomaly had lasted, but he was right about one thing. On October 4, he advised newbie agent Sands that,

any chance you get to work something like this that truly has 0 repercussions if you mess it up ….take those opportunities

He did mess it up. It wasn’t just his own analysis; his repeated insistence that this was “garbage” appears to have made all the other investigators less careful, too. Six years later, we’re still no closer to understanding what happened.

Hellman was right about facing “zero repercussions if you mess it up.” By all appearances, he’s one of the few people who escaped any consequences for trying to investigate Russia in 2016. We know that several people — including Jim Comey, Andrew McCabe, Peter Strzok, and Bruce Ohr — were fired for their efforts to investigate Russia. We learned at the trial that Ryan Gaynor was threatened with criminal investigation for not answering questions the way Andrew DeFilippis wanted. Curtis Heide remains under FBI Inspection Division investigation for things he did in 2016. Rodney Joffe was discontinued as an FBI informant, according to him, at least, because he refused to cooperate with Durham’s investigation. Everyone who actually tried to investigate Russia in 2016 has faced adverse consequences.

But Hellman appears to have suffered none of those adverse consequences for fucking up an investigation into a still unexplained anomaly. On the contrary, he’s been promoted; he’s now a Supervisory Special Agent, leading a team of people who will, presumably, similarly blow off anomalies that might be politically inconvenient to investigate.

That’s the lesson of the Sussmann trial then: The only people who face zero consequences are the ones who fuck up.

Update: Corrected spelling of Hellman’s last name. Added Comey and McCabe to the list of those fired for investigating Russia. Removed Lisa Page–she quit before she was fired. In this podcast, Peter Strzok said that all FBI agents named in the DOJ IG Report are still under investigation.

Update: All the links to exhibits should be live now.

Update: Added detail that Listrak says Trump never sent marketing mail to Alfa Bank.

Timeline

I’ve put (what I believe are) all the exhibits about the FBI investigation below.

These times are surely not all correct. Durham consistently shared evidence without marking what time zone the evidence reflected. Importantly, some, but probably not all of the FBI Lync messages reflect UTC time; where I was fairly certain, I tried to reflect the time in ET, but in others, the timeline below doesn’t make sense (I’ll keep tweaking it). Some of the emails reflect the Chicago time zone.

September 19, 2:00PM: Sussmann Meeting

September 19: Priestap notes

September 19: Anderson notes

September 19, 3:00PM: Strzok accepts materials

September 19, 4:31PM: Gessford to Pientka: Moffa with info dropped off to Baker

September 19, 5:00PM: Sporre accepts materials

September 20, 9:30AM: Nate Batty to Jordan Smith: A/AD has two thumb drives.

September 20, 12:29PM: Batty accepts materials

September 20, 4:54PM: Batty and Hellman re analysis

September 21, 8:48AM: Batty to Hellman: at least look at the thumb drives [Batty Lync]

September 21, 4:25PM: Pientka Lync to Heide: People on 7th floor fired up about this server

September 21, 4:46PM: Batty to Heide and others: initial assessment

September 21, 1:10PM [time uncertain] Sands to Pape: Director level interest

September 21, 4:57PM: Norwat to Todd: Not a cyber matter

September 21, 5:06PM: Todd to Heide, cc Pientka

September 21, 5:52PM: Pientka to Heide: Nat [sic] Batty ha the thumb drives

September 22, 4:58AM: Hubiak to Heide: Let me know if you need anything from PH

September 22, 8:09AM: Todd to Marasco [noting thumb drives came from DNC, suggesting tie to debate]

September 22, 8:33AM: Pientka to Heide: Less than 24 hours to investigate, determine nexus, before losing traffic, watched by Comey

September 22, 9:30AM: Pientka to Moffa: Cyber, ugh. Read first email.

September 22, 9:59PM: Hellman to Heide: can you talk on link

September 22, 10:23AM: Marasco to Pientka: FYI

September 22, 11:13AM: Sands to Hubiak: Suspect email domain hosted on Listrak server — if you can help out with a knock and talk it would be great.

September 22, 11:14AM: Baker to Comey and others: Reporter is Lichtblau

September22, 11:34AM: Hubiak to Sands: Will start working on this now

September 22, 12:02PM: Batty to Wierzbicki: We think it’s a setup

September 22, 12:10PM: Heide to Pientka: We’re leaning to this being a false server.

September 22, 2:00PM: Pientka to Hubiak: Thanks for all your efforts. The CROSSFIRE HURRICANE Team greatly appreciates you running this to ground.

September 22, 4:22PM: Sands to all: open full investigation, summary of Hellman’s conclusions [OGA partner targeting Alfa?]

September 22, 5:33PM: Heide to Pientka: it’s a legit domain

September 22, 4:53PM: Sands to all: Cendyn agrees to cooperate, legit mail server

September 23, 8:26AM: Sands to Hubiak: Cendyn willing to cooperate and provide logs

September 23, 1:09PM: Heide to Sands: once we get that case opened, let’s cut a lead to the MM division requesting assisting with the interview, etc.

September 23, 1:53PM: Sands to others: Cendyn, as of this morning no longer resolves, picture of Barracuda spam filter

September 23, 4:04PM: Heide to Gaynor: Cyber’s review

September 23: EC Opening Memo [without backup]

September 26: Gaynor notes

September 26: Intelligence Memo

September 26, 8:02AM: Lichtblau to Kortan: You know what time we’re meeting?

September 26, 9:29AM: Kortan to Lichtblau: Baker’s tied up until later this afternoon.

September 26, 10:02AM: Lichtblau to Kortan: planning to bring Steve Myers

September 26, 10:15: Heide to Pientka: We want to interview the source of the whitepaper?

September 26, 12:09: Kortan to Baker and Priestap: some kind of recap later today?

September 26, 12:29: Sands to Hubiak: I’m writing a justification for an NSL to GoDaddy

September 26, 4:19PM: Heide to Shaw: apparently it’s going to hit the times?

September 26, 4:55PM: Heide to Hellman: We think it’s a bunk report still…

September 26, 5:02PM: Soo to Sands: searching current and historical lists of Tor exit nodes

September 26, 6:20PM: Sands to all, cc Heide: Spectrum hit at Cendyn, NSLs for Listrak, GoDaddy, redacted, Tor results

October 2, 12:02PM: Grasso to Wierzbicki: Two IP addresses

October 2, 7:02PM: Heide to Hellman: Check this out….

October 3: Tactical Product

October 3: Communications Exploitation

October 3, 1:48PM: Gaynor to Heide: Did white paper start with person of interest?

October 3, 2:49PM: Heide to Gaynor and Sands: Interview source

October 3, 3:00PM: Wierzbicki to Gaynor, cc Moffa: I agree with Heide, interview source

October 4: Kyle Steere to Wierzbicki and Sands: Documenting contents of thumb drive

October 4, 8:26AM: Sands to Hellman: 2 random IP addresses we got from tom grasso

October 4, 8:28AM: Sands to Hellman: we got a report on the Alfa Bank side that they also think this is nothing

October 4, 8:43AM: Hellman to Sands: any chance you get to work something like this that truly has 0 repercussions if you mess it up ….take those opportunities [alt version]

October 4, 10:00AM: Gaynor to Wierzbicki et al, cc Moffa: We need to know what we can learn from the logs [CT version]

October 4, 9:50PM: Grasso to Sands: SME who can help give context to the data we discussed

October 4, 11:08PM: Sands to Grasso: Sounds great.

October 5, 1:20PM: Trifiletti to Sands: i reminded him once more that he has never proceeded with anything when he wasnt absolutely sure

October 5, 1:33PM: Hosenball request for comment

October 5, 3:02PM: Strzok to Gaynor, forwarding Hosenball with Mediafire package

October 5, 4:08PM: Sands to Trifiletti: We need to speak to Dave dagon now too

October 5, 5:07PM: Sands to all: Update on CHS conversation — redacted explanation for why Alfa changed

October 5, 6:58PM: Grasso to Sands: I told Dagon that you would be able to protect his identity so that his name is not made public

October 6: Gaynor notes and drawing [alt version, more redacted]

October 6, 4:20PM: Materials to storage

October 6, 4:28PM: Christopher Trifiletti: CHS report (Spectrum: misconfigured server)

October 6, 4:54PM: Trifiletti to Sands: Actual text of 1023 submitted

October 6, 6:21PM: Wierzbicki to Gaynor: CHS debrief

October 7, 8:59AM: Sands to Trifiletti

October 12, 8:01AM: Sands to Heide: the “logs” we got from listrak were not network logs

October 13, 5:45PM: Gaynor to Wierzbicki: Mediafire (includes link)

October 19, 8:05AM: Sands to Heide: we spoke to mandiant and that we are talkingt o [sic] the tech people at the ISP today

October 19, 10:15AM: Gaynor to Wierzbicki: 2 IP addresses, Mediafire, Dagon author?

November 1, 3:09PM: Sands to Trifiletti: I have a few more logs to definitely prove there are no emails, and then Im putting it to bed

November 14, 2:52PM: Steere to Sands: [report on September 30 receipt of logs from Cendyn]

January 18, 2017: Closing Memo

March 27, 2017: Sands 302 with Alfa reports that Mandiant reported no historic data

July 24, 2017: Moffa to Priestap: Includes several other reports

July 24, 2017, 3:10PM: Sands accepts custody

John Durham’s Igor Danchenko Case May Be More Problematic than His Michael Sussmann Case

Legal commentators who ignored the run-up to the Michael Sussmann trial and still have not reported on the evidence of abuse and incompetence are writing posts claiming it was always clear that the jury in that case would return an acquittal. The same people, however, are suggesting there might be more to the Igor Danchenko charges.

I wrote a whole series of posts laying out why that’s wrong — the last one, with links to the others, is here. In addition, I’ve been tracking Durham’s difficulties obtaining classified discovery from other parts of DOJ here. This post pulls together the problems Durham faces in his second trial, which is currently scheduled to start on October 11.

As a reminder, the Danchenko indictment charges the former Christopher Steele source with telling five lies to the FBI in interviews in which they tried to vet the Steele dossier:

  • One alleged lie on June 15, 2017  about whether he had spoken with Chuck Dolan “about any material contained in the” dossier.
  • Four alleged lies, told in interviews on March 16, May 18, October 24, and November 16, 2017, that he spoke to Sergei Millian in late July 2016 when Danchenko knew (variably in 2016 or in the interviews in 2017) that he had never spoken with him; one charged lie accuses Danchenko of wittingly lying about speaking to Millian more than once.

Durham will have to prove that these five statements were intentional lies and that they were material to the FBI’s operations.

Danchenko could get his former lawyer to testify

Before looking at the problems with each of those claimed lies and their materiality, consider that shortly after being charged, Danchenko replaced Mark Schamel, who represented Danchenko in his 2017 interviews with the FBI, with a team led by Lowenstein Sandler’s Stuart Sears. This makes it possible for Danchenko to do something risky but in this case potentially warranted: have his former attorney testify.

The interview report from his initial series of interviews in January 2017 shows that Danchenko was uncertain about the answer to some questions, but over the course of three days, checked his own records and corrected himself when he realized he had made an error in answering an affirmative question from the FBI. In at least one case, Danchenko also provided proof to back one of his claims. Schamel could explain how diligently he and Danchenko prepared for these interviews, how Danchenko corrected himself when he realized he was wrong, and the perceived focus — by all appearances, on Danchenko’s Russian sources — of the FBI interviews.

In short, Schamel’s testimony could go a long way to demonstrating that where Danchenko made an error, it was not willful.

The FBI didn’t ask the question about Chuck Dolan that Durham claims they did

Then there are the charges themselves. There are two potentially fatal problems with the single charge built around Chuck Dolan, which Durham has used to insinuate, with no evidence, that the minor Hillary supporter was the source of the pee tape allegation. The alleged lie Durham has accused Danchenko of, though, pertains to a more general question: whether Danchenko had “denied … that he had spoken to [Dolan] about any material” in the dossier.

Except, as happened repeatedly in his indictment of Danchenko, that’s neither what Danchenko was asked nor what he answered.

As I laid out in this post, it appears that Danchenko was asked whether Dolan was a source for Steele, not whether he was a source for Danchenko.

FBI AGENT-1: Um, because obviously I don’t think you’re the only …

DANCHENKO: Mm-hmm.

FBI AGENT-1: Person that has been contributing. You may have said one – and this is the other thing we are trying to figure out.

[ … ]

FBI AGENT-1: Do you know a [PR Executive-1]?

DANCHENKO: Do I know [PR Executive-1]? Yeah.

FBI AGENT-1: How long have you known him? [laughing] [pause]

DANCHENKO: I’ve known [PR-Executive-1] for [pause] I don’t know, a couple years maybe.

FBI AGENT-1: Couple years?

DANCHENKO: But but but but but but but I’ve known of him for like 12 years.

[ … ]

DANCHENKO: Yeah. Yeah he likes Russia. I don’t think he is, uh, – would be any way be involved. But-but-uh-b-but he’s uh [UI] what I would think would be easily played. Maybe. Uh, he’s a bit naive in his, um liking of Russia. [emphasis Durham’s]

The question was premised on Steele having other primary subsources other than Danchenko and his response was a denial of the possibility that Dolan was one of them. All of Danchenko’s responses could be framed with that understanding of the question.

Durham’s alleged false statement appears to stem from a follow-up question. But there, Durham has completely misrepresented Danchenko’s answer.

FBI AGENT-1: Okay, so you’ve had … was there any … but you had never talked to [PR Executive-1] about anything that showed up in the dossier [Company Reports] right?

DANCHENKO: No.

FBI AGENT-1: You don’t think so?

DANCHENKO: No. We talked about, you know, related issues perhaps but no, no, no, nothing specific. [emphasis Durham’s]

Danchenko explicitly told the FBI that he talked to Dolan about “related issues.” Particularly as regards the pee tape, Danchenko might consider using information from Dolan for further investigation a “related issue” but not the core issue that the FBI was interested in.

As to the report for which Durham presents compelling evidence that Dolan was the source, Durham presents no evidence of specific questioning about it, and there’s abundant evidence that Danchenko was never sure which reports came from him and which (he assumed) came from others.

Durham did not present any evidence that Danchenko denied, in response to specific questions about whether Dolan was involved in identified reports, that Dolan played a role in the dossier. He has evidence that Danchenko answered a question about something else, and then, in a follow-up, gave a much more equivocal response than Durham claims he gave.

Another Durham materiality claim fizzles after he actually investigates

Plus, it is virtually certain that Danchenko will be able to prove that his equivocal response could not have been material.

That’s because — as a declassified footnote of the DOJ IG Report makes clear — the reason the FBI asked these questions about Dolan on June 15, 2017 was because FBI had recently obtained Section 702 material showing conversations between Danchenko’s source, Olga Galkina, and Dolan.

The FBI [received information in early June 2017 which revealed that, among other things, there were [redacted]] personal and business ties between the sub-source and Steele’s Primary Sub-source; contacts between the sub-source and an individual in the Russian Presidential Administration in June/July 2016; [redacted] and the sub‐source voicing strong support for candidate Clinton in the 2016 U.S. elections. The Supervisory Intel Analyst told us that the FBI did not have Section 702 coverage on any other Steele sub‐source. [my emphasis]

That is, the reason the FBI was asking these questions in the first place is because they were trying to understand the communications they had just discovered between Dolan and Danchenko.

As the indictment lays out, Danchenko didn’t hide the key details about Dolan — that he was doing business in Russia, had ties with Dmitry Peskov, and had developed a business relationship with Galkina.

In a later part of the conversation, DANCHENKO stated, in substance and in part, that PR Executive-1 had traveled on the October “delegation” to Moscow; that PR Executive-1 conducted business with Business-1 and Russian Sub-source-1; and that PR Executive-1 had a professional relationship with Russian Press Secretary-1.

Durham claimed that Danchenko’s imagined lie was material because it deprived the FBI from obtaining information on Dolan.

DANCHENKO’s lies denying PR Executive-1 ‘s role in specific information referenced in the Company Reports were material to the FBI because, among other reasons, they deprived FBI agents and analysts of probative information concerning PR Executive-1 that would have, among other things, assisted them in evaluating the credibility, reliability, and veracity of the Company Reports, including DANCHENKO’s sub-sources.

We now know that, at the time Durham made this claim, he had barely begun the process of obtaining relevant evidence from DOJ IG. Even in the Michael Sussmann case, Durham first made a formal discovery request of Michael Horowitz’s office on October 13, 2021, almost a month after charging Sussmann (and just three weeks before indicting Danchenko). Durham didn’t receive materials that completely undermined his case against Sussmann until March.

From that, it’s fairly safe to assume that Durham (again) didn’t bother to test whether there was any basis for his materiality claims before building a long speaking indictment around them.

The FBI didn’t need Danchenko to tell them about Dolan’s Russian ties. They had discovered that already from 702 collection targeting Galkina. That’s precisely why they asked Danchenko whether Dolan could be another Steele source. And when asked for more details, Dahchenko offered up the details that FBI would have been looking for.

Durham’s due diligence problems on the Sergei Millian charges

There are several kinds of problems with the remaining four counts. As noted, four of the charges against Danchenko accuse him of hiding what Durham claims is affirmative knowledge (arguably in real time) that Sergei Millian never called him in late July 2016.

As a threshold matter, there’s no language in the Danchenko indictment suggesting Durham has affirmative proof that such a call didn’t happen — whether from Millian or anyone else. In his FBI interview, Danchenko suggested the call may have happened on a secure app and he said he had replaced the phone he used at the time. So it’s not clear that Durham can rule out a call on Signal or similar encrypted app. When Durham first rolled out this indictment, I thought such a claim would be reckless, but we now know Durham built his entire Sussmann indictment around billing records even though Durham had affirmative proof (in his taxi reimbursement) that Sussmann did not bill Hillary for his meeting with the FBI.

Worse still, even in the transcripts that Durham miscites in the indictment, Danchenko included a bunch of caveats that Durham does not include in his charging language: “I don’t know,” “at the time I was under the impression it was him,” “at least someone I thought was him.”

That creates a temporal problem with the way Durham has charged this. Even if Danchenko came to believe later in 2016 or in 2017 that he never spoke with Millian, in his interviews, Danchenko was answering about what he believed to be the case in July 2016, when he shared this report with Christopher Steele. All Danchenko was claiming was that he talked to some journalists at a Russian outlet, someone called Danchenko shortly thereafter (at a time, it should be said, when Oleg Deripaska likely already knew of the dossier project), and Danchenko assumed it was Millian because it was the most logical explanation. From the start, Danchenko always admitted his uncertainty about that call.

Durham is relying on a Twitter feed he has already said makes false claims about the Durham investigation

Then there’s the fact that Durham is relying on Sergei Millian as a witness against Danchenko.

As I noted last year, in his indictment, Durham claimed to prove that such a call had not happened based on Millian’s say-so. But not actual testimony. Rather, at that point, Durham was relying on Sergei Millian’s Twitter feed.

Chamber President-1 has claimed in public statements and on social media that he never responded to DANCHEKNO’s [sic] emails, and that he and DANCHENKO never met or communicated.

That was batshit insane then, not least because over the years journalists and others have raised real questions about the authenticity of Millian’s Twitter account. And since charging Danchenko, Millian has repeatedly made claims on Twitter that utterly demolishes the credibility of Millian’s Twitter feed.

Millian has played a key role in the “sleuths corner” that has ginned up all sorts of false claims about Durham’s investigation.

This explicit affiliation will entitle Danchenko to subpoena the activity of the group, and even if Millian were entirely credible, there are a number of people associated with the corner who are not.

Then, as part of his role in generating froth about the Durham investigation, Millian played a central role in misrepresenting a claim Durham had made in a filing in the Sussmann case, suggesting that Durham had proven that researchers had spied on the Trump White House.

This led Durham to formally state that those who made such claims were “misrepresent[ing] facts contained in the Government’s Motion.” So Durham has publicly accused his star witness — Sergei Millian’s Twitter feed — of making false claims about matters pertaining to Durham’s investigation.

Worse still, in the same time period, Millian claimed that he had called the White House and told them “who was working against them.”

That reflects the kind of knowledge that could only come from a concerted effort, in real time (seemingly in 2016), to fuck with the Fusion investigation, followed by a subsequent effort (at such time when Trump was in the White House), to exact a cost for the investigation. Effectively, with this tweet, Millian confessed to being part of the effort to undermine the Russian investigation. That makes Millian’s contact with Deripaska in 2016 all the more problematic, since Deripaska has seemingly carried out a sustained campaign to attack the Russian investigation. But it also suggests that Millian’s claims to have entirely blown off Danchenko’s quetions were false.

Millian has since claimed that Durham’s office was trying to keep him off Twitter, but that he refused because he wants to attack his enemies.

This is all just stuff that Millian has done since the indictment, and to the extent earlier Millian tweets are preserved showing professed knowledge of the 2016 Russian operation (as some are), Danchenko would be able to use those at trial as well.

Which may be why — at least according to Millian’s unreliable Twitter feed — Durham is now trying to get Millian to come testify at trial. But Millian suggests that testifying under oath to the claims he has been making on Twitter for years would amount to “using him.”

Durham’s star witness refuses to return to the US without some kind of “gentleman’s agreement” regarding his “safe return.” That’s not going to be a very credible witness on the stand, if he even shows up to testify.

The counterintelligence investigation against Millian was real in 2016 and may be realer now

Which leads us, again, to Durham’s failures to do basic investigation before charging these indictments.

We know Durham didn’t reach out to Michael Horowitz until weeks before charging Danchenko. The Sussmann case made it clear Durham had not received centrally relevant evidence in the Sussmann case until March.

That means Durham may not have been aware of the public evidence — in both the DOJ IG Report and declassified footnotes — describing the counterintelligence investigation opened on Millian in October 2016, which was opened in NY (where Millian lived at the time), not DC (where Fusion and others were also raising concerns).

In addition, we learned that [Millian] was at the time the subject of an open FBI counterintelligence investigation. 302 We also were concerned that the FISA application did not disclose to the court the FBI’s belief that this sub-source was, at the time of the application, the subject of such an investigation. We were told that the Department will usually share with the FISC the fact that a source is a subject in an open case. The OI Attorney told us he did not recall knowing this information at the time of the first application, even though NYFO opened the case after consulting with and notifying Case Agent 1 and SSA 1 prior to October 12, 2016, nine days before the FISA application was filed. Case Agent 1 said that he may have mentioned the case to the OI Attorney “in passing,” but he did not specifically recall doing so. 303

301 As discussed in Chapter Four, [Millian] [redacted]

302 According to a document circulated among Crossfire Hurricane team members and supervisors in early October 2016, [Millian] had historical contact with persons and entities suspected of being linked to RIS. The document described reporting [redacted] that [Millian] “was rumored to be a former KGB/SVR officer.” In addition, in late December 2016, Department Attorney Bruce Ohr told SSA 1 that he had met with Glenn Simpson and that Simpson had assessed that [Millian] was a RIS officer who was central in connecting Trump to Russia.

We know Durham has little familiarity with the Mueller Report, much less the underlying investigation. Which means he similarly may not have considered the evidence that Millian was cultivating George Papadopoulos during precisely the same weeks when Danchenko was contacting Millian for information on Trump.

Papadopoulos first connected with Millian via LinkedIn on July 15, 2016, shortly after Papadopoulos had attended the TAG Summit with Clovis.500 Millian, an American citizen who is a native of Belarus, introduced himself “as president of [the] New York-based Russian American Chamber of Commerce,” and claimed that through that position he had “insider knowledge and direct access to the top hierarchy in Russian politics.”501 Papadopoulos asked Timofeev whether he had heard of Millian.502 Although Timofeev said no,503 Papadopoulos met Millian in New York City.504 The meetings took place on July 30 and August 1, 2016.505 Afterwards, Millian invited Papadopoulos to attend-and potentially speak at-two international energy conferences, including one that was to be held in Moscow in September 2016.506 Papadopoulos ultimately did not attend either conference.

On July 31 , 2016, following his first in-person meeting with Millian, Papadopoulos emailed Trump Campaign official Bo Denysyk to say that he had been contacted “by some leaders of Russian-American voters here in the US about their interest in voting for Mr. Trump,” and to ask whether he should “put you in touch with their group (US-Russia chamber of commerce).”507 Denysyk thanked Papadopoulos “for taking the initiative,” but asked him to “hold off with outreach to Russian-Americans” because “too many articles” had already portrayed the Campaign, then-campaign chairman Paul Manafort, and candidate Trump as “being pro-Russian.”508

On August 23, 2016, Millian sent a Facebook message to Papadopoulos promising that he would ” share with you a disruptive technology that might be instrumental in your political work for the campaign.”509 Papadopoulos claimed to have no recollection of this matter.510

On November 9, 2016, shortly after the election, Papadopoulos arranged to meet Millian in Chicago to discuss business opportunities, including potential work with Russian “billionaires who are not under sanctions.”511 The meeting took place on November 14, 2016, at the Trump Hotel and Tower in Chicago.512 According to Papadopoulos, the two men discussed partnering on business deals, but Papadopoulos perceived that Millian’s attitude toward him changed when Papadopoulos stated that he was only pursuing private-sector opportunities and was not interested in a job in the Administration.5 13 The two remained in contact, however, and had extended online discussions about possible business opportunities in Russia. 514 The two also arranged to meet at a Washington, D.C. bar when both attended Trump’s inauguration in late January 2017.515

More recently, as part of charges against a different Russian-American who fled because of a counterintelligence investigation, DOJ made clear that Millian’s organization knew at least by 2013 they should have registered as agents of Russia.

a. On or about January 30, 2013, BRANSON received an email from an individual using an email address ending in “mail.ru.” Based on my review of publicly available information, I have learned that this individual was a Senior Vice President of the Russian American Chamber of Commerce in the USA. This email had the subject line “Problem.” and the text of the email included, among other things, a portion of the FARA Unit’s website with background on FARA. In response, BRANSON wrote, in part, “I am interested in the number of the law, its text in English[.]” The sender then responded with “Lena, read …” and copied into the email background on FARA and portions of the statute.

All of which to say that Durham likely cannot make any “gentleman’s agreement” on DOJ’s behalf with Millian about coming to the US to testify against Danchenko, because other parts of DOJ have equities that significantly precede Durham’s, equities that pertain more directly to harm to the United States and current national security priorities.

Plus, even if Durham did succeed in bringing his star witness against Danchenko to EDVA to testify against him, even if Millian weren’t arrested on sealed charges when he landed, the trial would end up being a circus in which the evidence against Millian and the false claims Millian has made about the Durham investigation playing a more central role than the evidence against Danchenko.

There are few things Durham could do that would make it more clear how his witch hunt has served Russia’s interests, and not those of the US.

I mean, I’m all for it. But at some point Durham may come to recognize that’s not a winning case.

There is affirmative evidence that any alleged lies Danchenko told were not material

It’s not clear whether Sussmann jurors ever got as far as considering the materiality problems in the case against Sussmann. But, even on top of the specific problem arising from the Section 702 directive targeting Galkina, described above, Durham may have bigger materiality problems with Danchenko.

That’s because — as explained in the DOJ IG Report Durham didn’t read closely — FBI repeatedly made decisions that affirmatively reflect finding claims in the dossier and Danchenko’s interviews were not material to their decision to keep surveilling Carter Page.

That’s true, first of all, because the initial FISA targeting Page obtained useful information. Notes from Tashina Gaushar that Durham belatedly discovered in the Sussmann case described the FISAs against Page this way:

So before the FBI ever spoke to Danchenko, they had independent reason (on top of the counterintelligence concerns NYFO had used in March 2016 to open an investigation on Page) to target Page.

Moreover, the FBI started identifying problems with the Millian allegations before the first FISA, but never integrated those or Danchenko’s own interviews into their FISA applications.

Regarding the information in the first bullet above, in early October 2016, the FBI learned the true name of Person 1 (described in Report 95 as “Source E”). As described in Chapter Six, the Primary Sub-source told the FBI that he/she had one 10- to 15-minute telephone call with someone he/she believed to be Person 1, but who did not identify him/herself on the call. We found that, during his/her interview with the FBI, the Primary Sub-source did not describe a “conspiracy” between Russia and individuals associated with the Trump campaign or state that Carter Page served as an “intermediary” between Manafort and the Russian government. In addition, the FBl’s summary of the Primary Sub-source’s interview did not describe any discussions between the parties concerning the disclosure of DNC emails to Wikileaks in exchange for a campaign platform change on the Ukrainian issue. To the contrary, according to the interview summary, the Primary Sub-source told the FBI that Person 1 told him/her that there was “nothing bad” about the communications between the Kremlin and Trump, and that he/she did not recall any mention of Wikileaks. Further, although Steele informed the FBI that he had received all of the information in Report 95 from the Primary Sub-source, and Steele told the OIG the same thing when we interviewed him, the Primary Subsource told the FBI that he/she did not know where some of the information attributed to Source E in Report 95 came from. 388 Despite the inconsistencies between Steele’s reporting and the information his Primary Sub-source provided to the FBI, the subsequent FISA renewal applications continued to rely on the Steele information, without any revisions or notice to the court that the Primary Sub-source had contradicted the Steele reporting on key issues described in the renewal applications. Instead, as described previously, FISA Renewal Application Nos. 2 and 3 advised the court:

In an effort to further corroborate [Steele’s] reporting, the FBI has met with [Steele’s] [redacted] sub-source [Primary Sub-source] described immediately above. During these interviews, the FBI found the [redacted] subsource to be truthful and cooperative [redacted]. The FBI is undertaking additional investigative steps to further corroborate the information provide [sic] by [Steele] and [redacted]

It cannot be the case that FBI at once ignored everything Danchenko said that should have raised concerns, but also that Danchenko’s repetition of the things he said in his first interview would be material to later parts of the investigation. There’s a 478-page report laying out why that’s not the case.

As to the Dolan tie, the FBI obtained intelligence that the reports that most mattered to the ongoing Russian investigation — the sketchy Cohen-in-Prague stories sourced to Olga Galkina, stories that may well have arisen because Dolan vouched for Galkina with Peskov — were disinformation a week before first speaking to Danchenko.

A January 12, 2017, report relayed information from [redacted] outlining an inaccuracy in a limited subset of Steele’s reporting about the activities of Michael Cohen. The [redacted] stated that it did not have high confidence in this subset of Steele’s reporting and assessed that the referenced subset was part of a Russian disinformation campaign to denigrate U.S. foreign relations. A second report from the same [redacted] five days later stated that a person named in the limited subset of Steele’s reporting had denied representations in the reporting and the [redacted] assessed that the person’s denials were truthful.

As I have shown, Mueller did not use the Cohen reports at all in predicating the investigation against Trump’s lawyer.

Finally, the DOJ IG Report strongly suggests that the FBI was not going to get a fourth FISA targeting Page until they discovered two new facilities — probably one or more encrypted app and some financial accounts — they thought might answer some of their outstanding questions about Page.

[A]vailable documents indicate that one of the focuses of the Carter Page investigation at this time was obtaining his financial records. NYFO sought compulsory legal process in April 2017 for banking and financial records for Carter Page and his company, Global Energy Capital, as well as information relating to two encrypted online applications, one of which Page utilized on his cell phone. Documents reflect that agents also conducted multiple interviews of individuals associated with Carter Page.

Case Agent 6 told us, and documents reflect, that despite the ongoing investigation, the team did not expect to renew the Carter Page FISA before Renewal Application No. 2’s authority expired on June 30. Case Agent 6 said that the FISA collection the FBI had received during the second renewal period was not yielding any new information. The OGC Attorney told us that when the FBI was considering whether to seek further FISA authority following Renewal Application No. 2, the FISA was “starting to go dark.” During one of the March 2017 interviews, Page told Case Agent 1 and Case Agent 6 that he believed he was under surveillance and the agents did not believe continued surveillance would provide any relevant information. Cast Agent 6 said [redacted]

SSA 5 and SSA 2 said that further investigation yielded previously unknown locations that they believed could provide information of investigative value, and they decided to seek another renewal. Specifically, SSA 5 and Case Agent 6 told us, and documents reflect, that [redacted] they decided to seek a third renewal. [redacted]

This is yet another reason why nothing Danchenko could have said in his interviews would have changed the FBI’s actions.

That leaves the purported lies — the same alleged lies about Millian — told in October and November 2017 that Durham claims Danchenko had been telling all along. By that point, though, Mueller already had George Papadopoulos refusing to provide details pertaining to Millian that would have raised further questions about Millian’s activities in 2016.

Honestly, this post barely scratches the surface of problems with Durham’s Igor Danchenko case. Things get worse when you consider Oleg Deripaska’s role in the dossier and the very active investigation into him and more recent sanctions into Dmitry Peskov.

And, this time, Durham may realize that. Just weeks before the Sussmann trial, Durham made a frenzied effort to include details about the dossier and Millian in Sussmann’s case. For example, he got approved as exhibits and “accidentally” released Fusion GPS files entirely unrelated to the Sussmann case. He attempted, but failed, to make Christopher Steele a central issue at the Sussmann trial. And during the testimony of Jared Novick, he attempted to introduce the names of dossier subjects that were unrelated to the core Sussmann charge. That is, Durham expanded the scope of his already unhinged conspiracy theory to incorporate topics — most notably, the dossier — that he might otherwise present at the Danchenko trial.

In the next two weeks, Durham will — after over ten weeks of delay — have to face the challenges of obtaining the classified discovery that Danchenko can demand to prove this is the case. In light of those challenges, we’ll see whether Durham wants to barrel forward towards yet another humiliating loss at trial.

The Ongoing Investigation into Paul Manafort’s Handlers

In this post, I noted that 22 months after Andrew Weissmann’s team wrote a 37-page report, plus a classified supplement, describing what they had learned about Paul Manafort’s role in the 2016 election operation, SSCI dedicated 142 pages of their 966 page report on the counterintelligence threat posed by Trump’s former campaign manager. The latter report, which had fewer investigative tools and relied heavily on the earlier effort, just stuck classified information right into the text and then redacted great swaths of it.

Among the things known to but redacted by SSCI in 2020 but not included in the unclassified parts of the Team M Report in 2018 are:

In other words, by 2020, investigators working with derivative investigative tools found a great deal of evidence to suggest that Deripaska and Kilimnik were not only centrally involved in Russia’s intelligence operation targeting the US in 2016, but also a concerted plan to undermine in the investigation into it after the fact.

Around about the time SSCI finished their report, the FBI offered a $250,000 reward leading to Kilimnik’s arrest.

All that is why I’m interested that the Team M Report, released in 2022, after the statute of limitations has expired on most crimes tied to the 2016 election (though not a conspiracy that continued after it), was released with so many b7A redactions reflecting an ongoing investigation.

I’ve put a list of them all below.

There are three redactions I find particularly remarkable.

Pericles

The treatment of Pericles, the investment fund that Manafort set up and Deripaska funded in 2007, is uneven among the four stories that tell Manafort’s story (it is mentioned in passing in the breach litigation). A paragraph introducing it in the Mueller Report serves to set up Rick Gates’ explanation that Manafort’s outreach to Deripaska during the campaign was an effort to settle Deripaska’s lawsuit relating to the fund. There’s a bit more in the SSCI Report, including the detail that while Kilimnik initially served as Manafort’s point of contact for the deal, Manafort later tried to hide aspects of it from him so as to hide it from the other Oligarchs. There’s a redacted paragraph as well, perhaps tied to the funding.

Pericles may be the one topic which the Team M Report dedicates more space to than the SSCI Report. After introducing the fund, a heavily-redacted paragraph, including a b7A exemption, describes the dispute that arose between Manafort and Deripaska. Then two of the lettered footnotes the Team M Report used to describe context are also redacted under a b7A redaction. There’s also a paragraph redacted using only a b5 (deliberative process) exemption describing the dispute.

Remember: That dispute was a key part of Deripaska’s double game in 2016, a way to make Manafort more insecure even as squeezing him to get cooperation on the campaign. Christopher Steele played a (as far as is known, unwitting) role in that double game, so if Deripaska injected the dossier with disinformation, that’s likely how he did so. But it’s the 13-year old business arrangement itself, and not the 6-year old exploitation of it, that remains redacted in the Team M Report as part of an ongoing investigation.

The August 2 Meeting

Then consider how the passage on the August 2, 2016 meeting between Manafort and Kilimnik appears in the Team M Report (as released under FOIA).

The story of the Havana Bar meeting is one that got told in depth by the Breach Litigation, the Mueller Report, and the SSCI Report — indeed, it was a central focus of the Breach Litigation, one that particularly impressed Judge Amy Berman Jackson. The Mueller Report provided a 3-page description that is, with just two exceptions, redacted only with grand jury redactions. The Mueller Report version describes the three topics discussed at the meeting this way:

As to the contents of the meeting itself, the accounts of Manafort and Gates–who arrived late to the dinner–differ in certain respects. But their version of events, when assessed alongside available documentary evidence and what Kilimnik told business associate Sam Patten, indicate that at least three principal topics were discussed.

In addition to redacting, under a b7A redaction, what else, besides campaign headquarters, was across the street from the Havana Club (possibly in Trump Tower), the Team M Report redacts much of the discussion about the differences between the three stories. Even the description of the three versions are structured differently.

The bulk of Manafort’s story — four and a half pages — focuses on the plan to carve up Ukraine, including the follow-up efforts made over the following two years. There’s an explicit reference — the only unredacted such reference within the body of the report — to more of the story appearing in the classified appendix. And just a short paragraph, partially redacted under a b7A exemption, discusses Manafort explaining to Kilimnik how he planned to win swing states.

Gates’ version focuses more on Manafort’s attempts to get paid (which may not appear in Manafort’s version at all). Whatever discussion Gates provided of the Ukraine plan is redacted under b7A; the most recent release of Gates’ 302s also redacts a lot about the August 2 meeting, including the cover story he told before he started cooperating.

Patten’s version of the meeting — which reflects what Kilimnik told Patten after the fact — is even more redacted than the Gates version in the Team M report. Those redacted passages may redact discussions that appear redacted in the most recent release of Patten’s 302s but which were cited in unredacted form in the SSCI Report. According to that, Manafort told Kilimnik that the way to win was to focus on increasing Hillary’s negatives.

Patten’s debriefing with the SCO provides the most granular account of what information Kilimnik obtained at the August 2, 2016 meeting:

Kilimnik told Patten that at the New York cigar bar meeting, Manafort stated that they have a plan to beat Hillary Clinton which included Manafort bringing discipline and an organized strategy to the campaign. Moreover, because Clinton’s negatives were so low [sic]-if they could focus on her negatives they could win the election. Manafort discussed the Fabrizio internal Trump polling data with Kilimnik, and explained that Fabrizio ‘s polling numbers showed that the Clinton negatives, referred to as a ‘therm poll, ‘ were high. Thus, based on this polling there was a chance Trump could win. 458

If that’s what does appear in the Team M Report, it remains redacted, in part under an ongoing investigation exemption. It focuses on the election, not the effort to carve up Ukraine.

Incidentally, the SSCI Report reveals one detail no other source I know did: Manafort met with Rudy and Trump before he went to meet Kilimnik. As the SSCI Report notes, this also happens to be the day before Stone started pitching Manafort on a way to save the candidate.

March, April, and May 2016

As noted above, the SSCI Report has heavily redacted passages discussing activities involving Kilimnik and Deripaska in March and April 2016. They don’t show up in the unclassified part of the Team M Report or the Mueller Report at all.

The May 2016 meeting between Manafort and Kilimnik does appear in the Mueller Report, though.

Manafort twice met with Kilimnik in person during the campaign period—once in May and again in August 2016. The first meeting took place on May 7, 2016, in New York City.905 In the days leading to the meeting, Kilimnik had been working to gather information about the political situation in Ukraine. That included information gleaned from a trip that former Party of Regions official Yuriy Boyko had recently taken to Moscow—a trip that likely included meetings between Boyko and high-ranking Russian officials.906 Kilimnik then traveled to Washington, D.C. on or about May 5, 2016; while in Washington, Kilimnik had pre-arranged meetings with State Department employees.907

Late on the evening of May 6, Gates arranged for Kilimnik to take a 3:00 a.m. train to meet Manafort in New York for breakfast on May 7.908 According to Manafort, during the meeting, he and Kilimnik talked about events in Ukraine, and Manafort briefed Kilimnik on the Trump Campaign, expecting Kilimnik to pass the information back to individuals in Ukraine and elsewhere.909 Manafort stated that Opposition Bloc members recognized Manafort’s position on the Campaign was an opportunity, but Kilimnik did not ask for anything.910 Kilimnik spoke about a plan of Boyko to boost election participation in the eastern zone of Ukraine, which was the base for the Opposition Bloc.911 Kilimnik returned to Washington, D.C. right after the meeting with Manafort.

There are two passages that reference the May meeting in the Team M Report, albeit in less detail than appears in the Mueller Report (notably leaving out Yuriy Boyko’s trip to Moscow, as well as Gates’ arrangements for the trip).

During the late spring of 2016, Kilimnik continued to collect information on the political situation in Ukraine.

[4 line b5 redaction]

Kilimnik further explained that he planned to be in Washington, D.C., between May 5 and May 8, 2016.8

[snip]

On May 7, 2016, Kilimnik met with Manafort in New York City.97 Gates arranged the meeting and purchased Kilimnik’s Amtrak tickets from Washington, D.C. to New York.98 According to Manafort, he briefed Kilimnik on the Trump campaign, expecting Kilimnik to pass the information back to individuals in Ukraine and elsewhere.99 Manafort stated that Kilimnik did not ask for anything based upon Manafort’s position with the campaign.100 Kilimnik spoke about Boyko’s plan for election participation in the occupied zone of Ukraine.

But this discussion has some big b7A redactions, including some redacting personal information and others redacting law enforcement techniques. In other words, whereas Mueller was able to include at least some discussion of the May meeting in the report, parts of it remain sensitive, three years later, even as Russia attempts to implement a plan to carve up Ukraine, now using force, pitched to Manafort at that Havana Bar meeting.

There seems to be increased investigative interest in those spring 2016 events as time has passed, so much so that DOJ may be sharing less than Mueller did in his initial release.

To be clear: none of these redactions mean that Manafort is at legal risk from these ongoing investigations. As noted, the statutes of limitation have expired for most criminal exposure (unless as part of a continuing conspiracy). More likely, all these b7A redactions indicate counterintelligence investigations, not criminal ones.

But what’s interesting about the release of this report, 40 months after it was written, is that it hasn’t gotten any less sensitive over time.

b7A redactions

  • Possible reference to Rick Gates’ role on the Inauguration Committee
  • Manafort’s consulting work for Deripaska
  • Pericles fund
  • Kilimnik’s ties to Russian intelligence services and IRI
  • Jonathan Hawker and Alex Van der Zwaan on Kilimnik’s ties to RIS
  • Kilimnik’s ties to Viktor Boyarkin
  • Kilimnik’s May 2016 trip to the US
  • The August 2 meeting with Kilimnik in the Havana Club
  • A reference to Kilimnik’s reference to black caviar
  • The plan to carve up Ukraine
  • Manafort’s plan to win the election
  • Gates’ version of the August 2 meeting
  • Sam Patten’s version of the August 2 meeting
  • Manafort’s sharing of polling data
  • The purpose behind Manafort’s trip to Spain
  • The second meeting in Spain

There Was No Crime Predicating the Durham Investigation

Deep in a NYT piece that suggests but does not conclude that John Durham’s purpose is to feed conspiracy theories, Charlie Savage writes,

Mr. Barr’s mandate to Mr. Durham appears to have been to investigate a series of conspiracy theories.

That’s as close as any traditional media outlet has come to looking at the flimsy predication for Durham’s initial appointment.

Billy Barr, however, has never hidden his goal. In his memoir, he describes returning to government — with an understanding about the Russian investigation gleaned from the propaganda bubble of Fox News, not any firsthand access to the evidence — with a primary purpose of undermining the Russian investigation. He describes having to appoint Durham to investigate what he believed, again based off Fox propaganda, to be a bogus scandal.

I would soon make the difficult decision to go back into government in large part because I saw the way the President’s adversaries had enmeshed the Department of Justice in this phony scandal and were using it to hobble his administration. Once in office, it occupied much of my time for the first six months of my tenure. It was at the heart of my most controversial decisions. Even after dealing with the Mueller report, I still had to launch US Attorney John Durham’s investigation into the genesis of this bogus scandal.

In his shameless excuses for bypassing MLAT to grill foreigners about their role in the investigation, Barr describes “ha[ving] to run down” whether there was anything nefarious about the intelligence allies shared with the US — a rather glorified description for “chasing George Papadopoulos’ conspiracy theories around the globe.”

Durham’s investigation was up and running by the late spring. Pending IG Horowitz’s completion of his review of Crossfire Hurricane, I asked Durham to focus initially on any relevant activities by the CIA, NSA, or friendly foreign intelligence services. One of the more asinine aspects of media coverage about Durham’s investigation was all the heavy breathing during the summer as news seeped out that I had contacts with foreign governments on Durham’s behalf. Various journalists and commentators claimed this indicated that I was personally conducting the investigation and suggested there was something nefarious about my communicating with allied governments about Russiagate. [sic] This coverage was a good example of the kind of partisan nonsense that passes as journalism these days.

One of the questions that had to be run down was whether allied intelligence services had any role in Russiagate [sic] or had any relevant information. One question was whether US officials had asked foreign intelligence services to spy on Americans. Various theories of potential involvement by British, Australian, or Italian intelligence agencies had been raised over the preceding two years. Talking to our allies about these matters was an essential part of the investigation. It should not surprise anyone that a prosecutor cannot just show up on the door- step of a foreign intelligence agency and start asking questions. An introduction and explanation at more senior levels is required. So— gasp!—I contacted the relevant foreign ambassadors, who in turn put me in touch with an appropriate senior official in their country with authority to deal with such matters. These officials quite naturally wanted to hear from me directly about the contours of the investigation and how their information would be protected.

Much later, when Barr claimed that Durham would not lower DOJ standards just to obtain results, Barr again described an investigation launched to “try to get to the bottom of what happened” rather than investigate a potential crime.

I acknowledged that what had happened to President Trump in 2016 was abhorrent and should not happen again. I said that the Durham investigation was trying to get to the bottom of what happened but “cannot be, and it will not be, a tit-for-tat exercise.” I pledged that Durham would adhere to the department’s standards and would not lower them just to get results. I then added a point, meant to temper any expectation that the investigation would necessarily produce any further indictments:

[W]e have to bear in mind [what] the Supreme Court recently re- minded [us] in the “Bridgegate” case—there is a difference between an abuse of power and a federal crime. Not every abuse of power, no matter how outrageous, is necessarily a federal crime.

And then Durham lowered DOJ standards and charged two false statement cases for which he had (and has, in the case of Igor Danchenko) flimsy proof and for which, in the case of Michael Sussmann, he had not tested the defendant’s sworn explanation before charging. Durham further lowered DOJ standards by turning false statement cases into uncharged conspiracies he used to make wild unsubstantiated allegations about a broad network of others.

This entire three year process was launched with no evidence that a crime was committed, and it seems likely that only the Kevin Clinesmith prosecution, which DOJ Inspector General Michael Horowitz handed Durham months after he was appointed as a fait accompli and which could easily have been prosecuted by the DC US Attorney’s Office, provided an excuse to convene a grand jury to start digging in the coffers of Fusion GPS and Perkins Coie.

There was no crime. Durham was never investigating a suspected crime and then, as statutes of limitation started expiring, he hung a conspiracy theory on a claimed false statement for which he had no solid proof. Eight months into Durham repeating those conspiracy theories at every turn — conspiracy theories that Durham admitted would not amount to a crime in any case! — a jury told Durham he had inadequate proof a crime was committed and that the entire thing had been a waste of time and resources.

“The government had the job of proving beyond a reasonable doubt,” she said, declining to give her name. “We broke it down…as a jury. It didn’t pan out in the government’s favor.”

Asked if she thought the prosecution was worthwhile, the foreperson said: “Personally, I don’t think it should have been prosecuted because I think we have better time or resources to use or spend to other things that affect the nation as a whole than a possible lie to the FBI. We could spend that time more wisely.”

Compare that to the Russian investigation, which was started to figure out which Trump associate had advance knowledge of Russia’s criminal hack-and-leak operation and whether they had any criminal exposure in it. Here’s how Peter Strzok described it in his book:

[A]gents often don’t even know the subject of a counterintelligence investigation. They have a term for that: an unknown subject, or UNSUB, which they use when an activity is known but the specific person conducting that activity is not — for instance, when they are aware that Russia is working to undermine our electoral system in concert with a presidential campaign but don’t know exactly who at that campaign Russia might be coordinating with or how many people might be involved.

To understand the challenges of an UNSUB case, consider the following three hypothetical scenarios. In one, a Russian source tells his American handler that, while out drinking at an SVR reunion, he learned that a colleague had just been promoted after a breakthrough recruitment of an American intelligence officer in Bangkok. We don’t know the identity of the recruited American — he or she is an UNSUB. A second scenario: a man and a woman out for a morning run in Washington see a figure toss a package over the fence of the Russian embassy and speed off in a four-door maroon sedan. An UNSUB.

Or consider this third scenario: a young foreign policy adviser to an American presidential campaign boasts to one of our allies that the Russians have offered to help his candidate by releasing damaging information about that candidate’s chief political rival. Who actually received the offer of assistance from the Russians? An UNSUB.

[snip]

The FFG information about Papadopoulos presented us with a textbook UNSUB case. Who received the alleged offer of assistance from the Russians? Was it Papadopoulos? Perhaps, but not necessarily. We didn’t know about his contacts with Mifsud at the time — all we knew was that he had told the allied government that the Russians had dirt on Clinton and Obama and that they wanted to release it in a way that would help Trump.

The answer, by the way, was that at least two Trump associates had advance knowledge, George Papadopoulos and Roger Stone, and Stone shared his advance knowledge with Rick Gates, Paul Manafort, Steve Bannon, and Donald Trump, among others. By all appearances, DOJ was still investigating whether Stone had criminal exposure tied to his advance knowledge when Barr interfered in that investigation in February 2020, a fact that Barr hid until the day before the 2020 election.

With the Russian investigation, there was a crime: a hack by a hostile nation-state of a Presidential candidate, along with evidence that her opponent at least knew about the related leak campaign in advance. With the Durham investigation, there were only Fox News conspiracy theories and the certainty that Donald Trump shouldn’t be held accountable for encouraging Russia to hack his opponent.

The fact that this entire three year wild goose hunt was started without any predicating crime is all the more ridiculous given Durham’s repeated focus both on the predication of Crossfire Hurricane (in criticizing Horowitz’s report on Carter Page) and the Alfa Bank inquiry (during the Sussmann trial). John Durham, appointed to investigate conspiracy theories, deigns to lecture others about appropriate predication.

And that’s undoubtedly why, in the face of this humiliating result for Durham, Billy Barr is outright lying about what Durham’s uncharged conspiracy theories revealed about the predication of the Russian investigation.

He and his team did an exceptionally able job, both digging out very important facts and presenting a compelling case to the jury. And the fact that he … well, he did not succeed in getting a conviction from the DC jury, I think he accomplished something far more important, which is he brought out the truth in two important areas. First, I think he crystalized the central role played by the Hillary campaign in launching — as a dirty trick — the whole RussiaGate [sic] collusion [sic] narrative and fanning the flames of it, and second, I think, he exposed really dreadful behavior by the supervisors in the FBI, the senior ranks of the FBI, who knowingly used this information to start an investigation of Trump and then duped their own agents by lying to them and refusing to tell them what the real source of that information was.

That’s not what the trial showed, of course. Every witness who was asked about the centrality of the Alfa Bank allegations responded that there were so many other ties between Trump and Russia that the Alfa Bank allegations didn’t much stick out. Here’s how Robby Mook described it in questioning by Michael Bosworth.

[I]t was one of many pieces of information we had. And, in fact, every day, you know, Donald Trump was saying things about Putin and saying things about Russia. So this was a constituent piece of information among many pieces of information, and I don’t think we saw it as this silver bullet that was going to conclude the campaign and, you know, determine the outcome, no.

Q. There were a lot of Trump/Russia issues you were focused on?

A. Correct.

Q. And this was one of many?

A. Correct.

In response to questioning by Sean Berkowitz, Marc Elias traced the increased focus on Russia to Trump’s own request for Russia to hack Hillary.

Q. Let’s take a look — let me ask a different question. At some point in the summer of 2016, did Candidate Trump make any statements publicly about the hack?

A. Yes.

Q. What do you recall him saying and when?

A. There was a publication of emails, of DNC emails, in the days leading up to the Democratic National Convention. And it was in my opinion at the time clearly an effort by Russia to ruin what is the one clean shot that candidates get to talk to the American public. Right? The networks give you free coverage for your convention. And in the days before the convention, there was a major leak. And rather than doing what any decent human being might do and condemn it, Donald Trump said: I hope Russia is listening and, if so, will find the 30,000 Hillary Clinton emails that he believed existed and release them. That’s what I remember.

Q. Did you feel the campaign was under attack, sir?

A. We absolutely were under attack.

Q. And in connection with that, were there suggestions or possibilities at least in your mind and in the campaign’s mind that there could be a connection between Russia and Trump?

A. Again, this is, you know — this was public — Donald Trump — you know, the Republican Party historically has been very anti-Russia. Ronald Reagan was like the most anti-communist, the most anti-Soviet Union president.

And all of a sudden you had this guy who becomes the nominee; and they change the Russian National Committee platform to become pro-Russian and he has all these kind things to say about Putin. And then he makes this statement.

And in the meantime, he has hired, you know, Paul Manafort, who is, you know, I think had some ties to — I don’t recall anymore, but it was some pro-Russia thing in Ukraine.

So yeah. I thought that there were — I thought it was plausible. I didn’t know, but I thought it was an unusual set of circumstances and I thought it was plausible that Donald Trump had relations with — through his company with Russia.

Democrats didn’t gin up the focus on Trump’s ties to Russia, Trump’s own begging for more hacking did.

The trial also showed that this wasn’t an investigation into Trump. Rather, it was opened as an investigation into Kirkland & Ellis client Alfa Bank, which FBI believed had ties to Russian intelligence.

The investigation even considered whether Alfa Bank was victimizing Trump Organization.

Barr is similarly lying about whether supervisors revealed the source(s) of this information and what it was.

The source for the allegations was not Hillary, but researchers. And the trial presented repeated testimony that David Dagon’s role as one source of the allegations being shared with investigative agents. That detail was not hidden, but agents nevertheless never interviewed Dagon.

And even the purported tie to the Democrats was not well hidden. Indeed, the trial evidence shows that the FBI believed the DNC to be the source of the allegations, and that detail leaked down to various agents — including the two cyber agents, Nate Batty and Scott Hellman, whose shoddy analysis encouraged all other agents to dismiss the allegations — via various means.

Andrew DeFilippis made great efforts (efforts that lowered DOJ standards) to claim differently, but the evidence that key investigators assumed this was a DNC tip was fairly strong.

Three years after launching an investigation into conspiracy theories, Barr is left lying, claiming he found the result he set out to find three years ago. But the evidence — and the jury’s verdict — proves him wrong.

For years, Durham has been seeking proof that the predication of the Russian investigation was faulty. The only crime he has proven in the interim is that his own investigation was predicated on Fox News conspiracy theories.

FBI’s Russian Hack-and-Leak Investigation as Disclosed by the Sussmann Trial

Now that he has been acquitted, it’s easy to conclude the Michael Sussmann prosecution was a pointless right wing conspiracy theory. It was!

But the exhibits that came out at trial are a worthwhile glimpse of both the FBI’s investigation into the 2016 Russian hack of Democrats and the Bureau’s shoddy investigation of the Alfa Bank anomalies.

I’ve started unpacking what a shitshow the FBI investigation into the latter was here and collecting technical exhibits pertaining the investigation here (though that post is currently out of date).

As to the Russian hack-and-leak, Sussmann’s team facilitated the process with a summary exhibit they included showing a selection of FBI communications pertaining to the investigation that either involve or mention Sussmann. Sussmann introduced these documents to show how obvious his ties to the Democrats would have been to the FBI, including to some people involved in the Alfa Bank investigation. A few of these communications refute specific claims Durham made, showing that meetings or communications Durham argued must relate to the Alfa Bank effort could be explained, in one case far more easily, as part of the hack-and-leak response. That is, some of these documents show that Durham was taking evidence of victimization by Russia and using it instead to argue that Sussmann was unfairly victimizing Trump.

 

 

Below, I’ve grouped the communications by topic (though a number of these communications span several topics). Note that Latham & Watkins’ paralegal only used the last date on these communications, which I will adopt. But a number reflect a communication chain that extends months and includes dates that are far more important to the Durham prosecution.

Some of these files include topics that have attracted a great deal of often misleading coverage, such as the efforts to get server images from the Democrats. Importantly, by the time the FBI asked for server images, according to these communications, the only place to get them was at CrowdStrike.

I don’t believe DNC/DCCC have the images that CS took. Only CS have those. It’s like paying ATM fees to your bank to get your cash. DNC/DCCC will be charged to get the images back.

After some discussion about who would pay CrowdStrike to create a second image, the firm offered to do it for free.

These communications also give a sense of the extent to which Democrats faced new and perceived threats all through the election. Given the communications below and some details I know of the Democrats’ response to the attacks, I suspect these communications do not include real attempted attacks, either because they were not reported or because the report went to FBI via another channel. While CrowdStrike attempted to ensure Sussmann was always in the loop, for example, that discipline was not maintained. And we know CrowdStrike found the compromise of the Democrats analytics hosted on AWS in September, a compromise that may only show up in these communications mentioned in passing. Some in the FBI seemed entirely unsympathetic to the paranoia that suffering a nation-state attack during an election caused, which couldn’t have helped already sour relations between the FBI and Hillary’s people.

Perhaps the most interesting communications — to me at least — pertain to efforts to authenticate the documents that got publicly posted and to identify any alterations to them. At least as laid out in these communications, the Democrats were way behind the public in identifying key alterations to documents posted by Guccifer 2.0, and it’s unclear whether the FBI was any further ahead. But these discussions show what kind of alterations the Democrats were able to identify (such as font changes) as well as which publicly posted documents the FBI was sharing internally.

FBI public statements

160614 DX102 A discussion of Jim Trainor’s preparation for a meeting with Ellen Nakashima in advance of her June 14, 2016 reporting the hack and CrowdStrike’s attribution. Among other things, they note Nakashima’s confidence that GOP PACs were also targeted.

160725 DX112 This email chain between Sussmann and Trainor captured Sussmann’s frustration that FBI made an announcement of an investigation into the DNC hack without first running the statement by Sussmann.

160729 DX117 Before FBI sent out a statement about the DCCC hack, Jim Trainor sent Sussmann their draft statement. In response, Sussmann complained that FBI said they were aware of media reports but not of the hack itself. The timing of this exchange is important because Durham’s team repeatedly described a meeting between Marc Elias and Sussmann that day pertaining to a server as relating to the Alfa Bank anomaly.

Points of contact

160616 DX105 An email thread sent within FBI OGC (including to Trisha Anderson) discussing an initial meeting between Jim Trainor, Amy Dacey, Sussmann, and Shawn Henry.

160621 DX107 Starting on June 16, Amy Dacey thanked Assistant Director Jim Trainor for meeting with the Democrats about the hack. The thread turned into a confused request from the campaign for a briefing about whether they, too, had been compromised.

160725 DX114 This chain reflects Hawkins’ confused response after Sussmann provided the contact information for a Hillary staffer with a role in technical security. Hawkins stated, “Nothing concerning HFA has come up.”

160809 DX127 After Donna Brazile replaced Debbie Wasserman Schultz, Sussmann set up a meeting between her and Jim Trainor.

160811 DX128 An email chain among cyber FBI personnel discusses three Secret threat briefings for the DNC, DCCC, and Hillary campaign. Sussmann was scheduled to attend all three briefings, and Marc Elias was scheduled to attend the DCCC and Hillary briefings (though he testified that he did not attend).

160811 DX130 Sussmann sent the FBI notice of a public report of the DNC’s establishment of a cybersecurity advisory board. The report was passed on to Jim Trainor.

DHS outreach

160802 DX106 A Lync chain starting in the initial aftermath of the Nakashima story, referencing an Intelligence Committee briefing, and discussing how to facilitate DHS assistance to the Democrats through Sussmann.

160802 DX120 With the goal of reaching out to the Democratic victims to offer assistance, DHS asked who the point of contact for both would be.

160816 DX125 This email chain documents DHS’ “SitRep” of their understanding of the DNC/DCCC hacks and their efforts to reach out to help. This includes sharing of DNC/DCCC “artifacts” with NCCIC.

Authentication and venue

160708 DX109 An email chain seeking DNC help authenticating a document released by Guccifer 2.0.

160723 DX110 A discussion starting on July 21 about authenticating and extending after the initial WikiLeaks dump. Hawkins observed, “Looks like there will be multiple releases on that [the WikiLeaks] front.”

160802 DX118 After Adrian Hawkins asked CrowdStrike’s Christopher Scott a question about a public report that the Democrats’ analytics had been hacked, Scott explained that Sussmann had to be involved in any discussions between the FBI and their cybersecurity contractor. Hawkins also asked for specifics about the compromised servers that the FBI could use to establish venue.

160816 DX134 An email chain mentioning but not including Sussmann describes the efforts to establish venue (especially for Field staff who rely on laptops and travel a lot) as well as the efforts to authenticate documents.

160822 DX136 Two Lync messages describing a script that can be used to match WordPress documents with files stolen from the DNC.

160922 DX145 NSD’s Deputy Chief of  Cyber, Sean Newell, asks Sussmann to meet to discuss some information requests from NDCA. They set up a meeting for September 26.

160930 DX147 Hawkins follows up on Newell’s request for information with a much more detailed request from the San Francisco Division. This request includes details of the forensics NDCA was asking for, generally to include the CrowdStrike reports, network diagrams, logs, and images for the compromised hosts.

161004 DX148 In response to WikiLeaks promises about an upcoming file release, Newell follows up on a September 27 request he made of Sussmann for any files that were altered as well as a list of files that had been released but not circulated outside of the victim organizations first, including some indication whether those had been altered. Sussmann says they would have information available later that week.

161012 DX150 In another chain of responses to Newell’s information request, someone at Perkins Coie passes on a description from the DCCC about how an image posted by Guccifer 2.0 differed from the file structure as it appeared on their server, including as it pertained to a file named, “Pelosi Vote Email.”

161026 DX154 This chain is a follow-up to the Newell request, though it actually includes Guccifer 2.0 documents about Trump’s taxes discussed. It includes description of an altered document published by Guccifer 2.0, in which the font was changed. It also includes a DOJ NSD person asking FBI to print out the document because they don’t have any unattributable computers.

161024 DX165 This is yet another continuation of the Newell request, this one included the Trump Report altered by Guccifer 2.0. It includes some discussion of alterations to that document (as compared to unaltered ones released by WikiLeaks). It also describes documents that a DNC research staffer believes were taken from his local desktop.

CrowdStrike Reports

160815 DX132 Burnham to Farrar explaining there are two CloudStrike reports, one for the DNC and the other for the DCCC. The former is done, while the latter will be done soon.

160825 DX137 Hawkins asks Sussmann about the DNC CrowdStrike report, Sussmann explains it’s still a few days away, but then the next day says he’s reading “it” (which may be the DCCC report). Sussmann’s response gets forwarded to a few more people.

160830 DX 138 A Lync chain conveying that Sussmann had alerted the FBI that the CrowdStrike report was done and asking if WFO should pick it up.

Server images

161013 DX151 In another chain of responses to Sean Newell’s information request, the discussion turns from Sussmann’s effort to make sure the Democrats respond to all the FBI’s data request to how to obtain images (whether to have CrowdStrike spend 10 hours to do it or let FBI onsite to do it themselves). As part of this chain, Sussmann says that “in theory” the Democrats would be amenable to letting the FBI onsite to image the serves themselves, but then checks to see whether the data is at CrowdStrike or the DNC.

161013 DX152 This chain is follow-up to the request for server images. Sussmann connects the FBI and CrowdStrike, CS offers to image the servers for free, and the FBI provides the address where to send them.

161028 DX153 A Lync that starts with Newell requesting someone attend the October 11 meeting with Sussmann, continues through a discussion about how to get images of the compromised servers (including whether Sussmann may have misinterpreted the ask), and includes a discussion about a re-compromise.

Lizard Squad ransomware threat

160803 DX121 Late night on August 2, Sussmann reported a ransomware threat from the Lizard Squad. This email discusses the various equities behind such a threat and involves a guy named Rodney Hays, whom the Durham team would at one point insist must be Rodney Joffe.

160806 DX124 This chain reflects more of the response to Sussmann reporting a ransomware threat from Lizard Squad. As noted, it involves a guy named Rodney Hays that Durham’s team insisted must be Joffe.

160922 DX144 Over a month after the Democrats reported the Lizard Squad threat, Eric Lu wrote up the intake report, including the bitcoin address involved and Sussmann’s email to Rodney on August 9 thanking him for his assistance.

Other threats

160726 DX115 Sussmann set up a meeting with Hawkins and others so someone could report “some offline activity related to the intrusion.” This was around the time when Ali Chalupa believed she was being followed, though nothing in this chain describes the threat.

160908 DX140 On August 26, EA Hawkins wrote Sussmann directly alerting him to a new phishing campaign targeting Democrats. On September 7, he wrote back with three accounts that may have been targeted.

160916 DX141 Moore emailing Josh Hubiak — a cyber agent in Pittsburgh — asking for contact information for Michael Sussmann so she can obtain the contact information for a DNC bigwig whose Microsoft Outlook account was compromised, apparently by APT 28. Hubiak is one of the agents also involved in the Alfa Bank investigation.

160917 DX142 The day after the request for contact information for the DNC bigwig, there’s further discussion about how to contact him. The FBI also shares new files reflecting the network share for a different DNC person, a former IT staffer, that was uploaded to Virus Total.

160927 DX146 In response to public reports that some Democratic phones may have been targeted and a potential compromise of Powell’s phone (probably Colin, whose communications were posted to dcleaks), there’s some chatter about what information is available from Apple and Google. One of the key agents involved complains that, “it would be awesome if Google helped out, as I know they are at least 2 steps ahead of me and I’m in a sad, losing game of catchup.”

161011 DX149 This seems to be a collection of Lync notes from October 11, showing three different issues pertaining to Sussmann happening at once: the transfer of custody of the thumb drives to the Chicago office, a reference to a meeting with Sussmann, and a report of a new Democratic concern about exposed Social Security numbers.

161230 DX155 A Lync chain that goes from October 28 through December 30 covering the concern about a bug at DNC HQ, the response to the NYT article naming Hawkins, and another compromise alert.

161017 DX164 This may be a summary prepared for Mother Jones. Whatever the purpose (there is no date), it describes the timeline of FBI’s response to a request for a sweep of DNC headquarters in response to some anomaly. Sussmann permitted the sweep but asked that it be done covertly, so as not to alert DNC staffers.

Crossfire Hurricane

160804 DX123 On August 4, Joe Pientka forwarded the original June 14 Nakashima story to the agents who had just been assigned to the Crossfire Hurricane team with the explanation, “Just going through old — possibly pertinent emails.”

Jury Acquits Michael Sussmann; Sussmann Lawyer Calls Prosecution “Extraordinary Prosecutorial Overreach”

The Michael Sussmann jury just announced its verdict.

Michael Sussmann was acquitted of lying to the FBI.

The jury deliberated for six hours. This morning, they asked for exhibits that include the taxi receipts showing that Sussmann did not bill the Hillary campaign for the meeting with the FBI. They also asked whether they all had to agree on the elements of the offense, suggesting some people believed Durham had not proven some aspects (such that Sussmann had lied or that he did so intentionally) whereas others believed Durham had not proven other parts (such as that it was material — remember that FBI largely proceeded as if this were a tip from the Hillary campaign).

Durham released a statement:

While we are disappointed in the outcome, we respect the jury’s decision and thank them for their service. I also want to recognize and thank the investigators and the prosecution team for their dedicated efforts in seeking truth and justice in this case.

Sussmann read a statement:

I have a few thoughts to share, now that trial has ended.

First, I told the truth to the FBI, and the jury clearly recognized that with their unanimous verdict today.

I am grateful to the members of the jury for their careful and thoughtful service. Despite being falsely accused, I am relieved that justice ultimately prevailed in this case.

As you can imagine, this has been a difficult year for my family and me. But right now, we are grateful for the love and support of so many during this ordeal, and I’m looking forward to getting back to the work that I love.

Finally, I want to thank my legal team at Latham & Watkins—Sean Berkowitz, Michael Bosworth, Natalie Rao, & Catherine Yao. They are the finest lawyers, and they worked tirelessly on my case.

Thank you.

The statement from his attorney, Sean Berkowitz, is more interesting.

We have always known that Michael Sussmann is innocent and we are grateful that the members of the jury have now come to the same conclusion.

But Michael Sussmann should never have been charged in the first place. This is a case of extraordinary prosecutorial overreach. And we believe that today’s verdict sends an unmistakable message to anyone who cares to listen: politics is no substitute for evidence, and politics has no place in our system of justice.

Update: Here’s what happened with the jury’s two questions from the end of the day on Friday.

The jury is present and deliberating. We received two notes at the very end of the day on Friday, which I will read for the record. Two questions in the same note.

The first question: “To deliver a verdict does the jury need to have consensus on each element (the 5 elements of offense) or just consensus on the verdict?”

And then second, they say they seem to be missing two government exhibits, 306 and 403.

So as to the first question, the Court has printed out a proposed response as follows:

“In order to reach a guilty verdict, each of you must find that the government has proven all five elements of the offense beyond a reasonable doubt. In order to reach a not guilty verdict, each of you must find that the government has not proven one or more of the five elements beyond a reasonable doubt. You need not agree on which element the government has failed to prove.”

I think that directly answers the jury’s questions, unless there are any comments or suggestions.

MR. BERKOWITZ: No comments from us. I think that’s correct, Your Honor.

THE COURT: Okay.

MR. DeFILIPPIS: No, Your Honor.

THE COURT: All right. So we will send that back. Our records do not have Government Exhibits 306 or 403 even being referenced, let alone admitted. Do you folks have a different recollection of that?

MR. DeFILIPPIS: Your Honor, we don’t have a different record. That’s, I think, our record as well.

THE COURT: Okay.

MR. BERKOWITZ: I think one of the exhibits is also a defense exhibit, 436. I don’t know if they have that one, but I’m assuming they have them available, if they’re in evidence.

THE COURT: Okay. We will just let them know that those exhibits are not admitted into evidence.

MR. BERKOWITZ: And, Your Honor, I’m told that Government Exhibit 403 is Defense Exhibit 436, which was admitted into evidence. It was one that likely went in as part of our group admission at the end so they may not be familiar. I would ask that they be told Government Exhibit 403 is also Defense Exhibit 436.

MR. DeFILIPPIS: No objection, Your Honor.

THE COURT: Okay. And how about 306? Any record of that?

MR. BERKOWITZ: We’re trying to find it.

THE COURT: Okay. (Discussion off the record)

THE COURT: Okay. Well, we’ll just leave it at 436 and not comment on the other one.

Update: Corrected table — I’ve lost track of the end of May.

“The Bell Can Never Be Unrung” … The Many Times Durham’s Prosecutors Flouted Judge Cooper’s Orders

Thanks to those who’ve donated to help defray the costs of trial transcripts. Your generosity has funded the expected costs. If you appreciate the kind of coverage no one else is offering, we’re still happy to accept donations for this coverage — which reflects the culmination of eight months work. 

The jury in the Michael Sussmann case will return to work this morning. They deliberated for some period on Friday (I’m not sure whether how long they deliberated has been reported). But the jury was unable to get questions answered or a verdict accepted after Judge Christopher Cooper left for the long holiday at 2:30PM. Even if the jury ends up finding Jim Baker’s testimony unreliable — which would likely be the quickest way to come to a verdict one way or another — I would expect it to take the jury a bit of time to sort through the centrality of his testimony to the charges.

So while we wait, I want to catalog how Durham’s team blew off just about every adverse decision Cooper made against them.

1. Delayed Request for Privileged Material

As I laid out in this post, Cooper ruled that a bunch of the emails over which the Democrats had originally claimed privilege were not. But because Durham waited so long to request a review of the privileged documents, Cooper ruled Durham could not use the emails at trial.

In cross-examination of Fusion’s tech person, Laura Seago, DeFilippis used the content of one of those emails that apparently discussed hiding her Fusion affiliation from Tea Leaves. (I laid out this exchange in this post.)

MR. DeFILIPPIS: So we have an issue with regard to Ms. Seago’s testimony. The government followed carefully Your Honor’s order with regard to the Fusion emails that were determined not to be privileged but that the government had moved on.

As Your Honor may recall, there was an email in there in which Ms. Seago talks very explicitly about seeking to approach someone associated with the Alfa-Bank matter and concealing her affiliation with Fusion in the email. When we asked her broadly whether she ever did that, she definitively said no when I, you know, revisited it with her. So it raises the prospect that she may be giving false testimony.

And so we were — you know, I considered trying to refresh her with that, but I didn’t understand that to be in line with Your Honor’s ruling. So the government is — we’d like to consider whether we should be — we’d like Your Honor to consider whether we should be able to at least recall her and refresh her with that document?

THE COURT: I don’t remember that question, but the subject matter was concealing Fusion or her identities in conversations with the press. If I recall correctly, that email related to “tea leaves,” correct?

After repeatedly asking Seago whether she had hidden her affiliation from the media, he asked about this email, catching Seago in a gotcha (though both Judge Cooper and Sussmann lawyer Sean Berkowitz took the question, as Seago seemed to, to relate to outreach to the press).

After setting his perjury trap, DeFilippis immediately tried to recall Seago onto the stand to delve into the content of this email. In this case, Judge Cooper ruled that DeFilippis had waived his opportunity to do so.

THE COURT: Well, I think the time to have asked the Court whether using the document to refresh was consistent with the order was before she was tendered and dismissed. So I think you waived your opportunity. All right? So we’re going to move on.

2. Non-Expert Expert Testimony

One of the most contentious arguments leading up to trial was Durham’s belated attempt to use an expert witness, ostensibly to discuss the technical complexities of DNS and Tor at the heart of the case (topics which prosecutors had witnesses explain over and over in as much detail as their nominal expert witness David Martin did), to address the accuracy of the research on the DNS anomaly.

This was an attempt to lead the jury to believe the anomaly was fabricated by Rodney Joffe and the researchers, in spite of the fact that Durham obtained plenty of evidence it was not.

On April 25, Judge Cooper ruled that Durham could have an expert discuss the technicalities of the data, but could only raise the accuracy if Sussmann did so himself.

Then on May 6, Durham attempted to expand that ruling by asking the expert to address materiality. In discussions the morning of opening arguments that focused entirely on the testimony of non-DNS expert Scott Hellman, not the nominal expert on DNS David Martin, Cooper prohibited Martin’s discussion of spoofing. (I describe these discussions here.)

Ironically, this was all supposed to be about visibility, the import of understanding how much DNS traffic a researcher could access to the quality of that researcher’s work. In Hellman’s own analysis — for which he fairly demonstrably did not review the data that Sussmann shared with the FBI very closely —  he showed no curiosity about the issue.

Searched “…global nonpublic DNS activity…” (unclear how this was done) and discovered there are (4) primary IP addresses that have resolved to the name “mail1.trump-email.com”. Two of these belong to DNS servers at Russian Alfa Bank. [my emphasis]

Nevertheless, DeFilippis used this nested set of witnesses as an opportunity to get Hellman — who admitted he had only a basic understanding of DNS, who didn’t review the data very closely, and who formed his initial conclusion in about a day — to comment on the methodology of the researchers.

Q. And what, if anything, did you conclude about whether you believed the authors of the paper or author of the paper was fairly and neutrally conducting an analysis? Did you have an opinion either way?

MR. BERKOWITZ: Objection, Your Honor.

THE COURT: Basis?

MR. BERKOWITZ: Objection on foundation. He asked him his opinion. He’s not qualified as an expert for that.

THE COURT: I’ll overrule it.

A. Sorry, can you please repeat the question?

Q. Sure. Did you draw a conclusion one way or the other as to whether the authors of this paper seemed to be applying a sound methodology or whether, to the contrary, they were trying to reach a particular result? Did you —

A. Based upon the conclusions they drew and the assumptions that they made, I did not feel like they were objective in the conclusions that they came to.

Q. And any particular reasons or support for that?

A. Just the assumption you would have to make was so far reaching, it didn’t — it just didn’t make any sense.

This is precisely the kind of opinion that Cooper had prohibited from an actual expert, admitted from someone whose own shoddy analysis became a recurrent theme for the defense.

3. Hearsay Clinton Tweet

DeFilippis’ efforts to get excluded information introduced was still more brazen with hearsay materials.

On May 7, Judge Cooper issued his initial ruling on which parts of Durham’s conspiracy theory could be admitted at trial. In general, Cooper permitted the introduction of Fusion GPS emails with the press about the Alfa Bank allegations, all of which post-date Sussmann’s alleged lie. He excluded all but one of the emails between Rodney Joffe and the researchers (more on the exception below).

Cooper equivocated wildly about a tweet sent out under Hillary Clinton’s name in response to the Franklin Foer story on the anomaly. In a hearing on April 27, he excluded it as hearsay.

THE COURT: All right. The Clinton Campaign Tweet, the Court will exclude that as hearsay. To the extent that the government believes that it offers some connection to the campaign and an attorney-client relationship, it’s likely duplicative of other evidence, so the Tweet will not come in.

In a pre-trial hearing on May 9 (after he had issued his order on motions in limine), Cooper explained he was revisiting the decision.

But I guess my question, as I have thought more about this, given the sort of two competing theories of the case and two narratives laid out in the Court’s ruling on the motion in limine, is whether it is relevant not for the truth, but to show the campaign’s connection to the alleged public relations effort to play stories regarding the Alfa-Bank data with the press and that therefore it is sort of context for the Government’s motive theory, that Mr. Sussmann sought to conceal that effort, as well as the campaign’s general connection to that effort.

After Sussmann lawyer Sean Berkowitz explained that the defense would not contest that the campaign wanted a story out there, Cooper opined that would make the tweet cumulative.

Well, if that’s going to be the case, and he’s not contesting that he was representing the campaign in connection with that effort, isn’t the tweet cumulative? It’s icing on the cake. Right?

DeFilippis claimed that without the tweet they would have no evidence about how the campaign worked the press on this issue (even though both Marc Elias, called as a government witness, and Robby Mook, who was originally listed as a government witness, eventually testified to the issue on the stand). After Judge Cooper said he would reserve his decision, Berkowitz noted that in fact, DeFilippis planned to use the tweet to claim the campaign wanted to go to the FBI when the testimony at trial (from both Elias and Mook) would establish that going to the FBI conflicted with the campaign’s goals.

[T]hey are offering the tweet for the truth of the matter, that that’s what the campaign desired and wanted and that it was a accumulation of the efforts.

Number one, it’s not the truth; and in fact, it’s the opposite of the truth. We expect there to be testimony from the campaign that, while they were interested in an article on this coming out, going to the FBI is something that was inconsistent with what they would have wanted before there was any press. And in fact, going to the FBI killed the press story, which was inconsistent with what the campaign would have wanted.

And so we think that a tweet in October after there’s an article about it is being offered to prove something inconsistent with what actually happened.

Then, after both Elias and Mook had testified that they had not sanctioned Sussmann going to the FBI, DeFilippis renewed his assault on Cooper’s initial exclusion, asking to introduce it through Mook’s knowledge that the campaign had tried to capitalize on the Foer story.

Having ruled in the past that the tweet was cumulative and highly prejudicial, Cooper nevertheless permitted DeFilippis to introduce the tweet if he could establish that Mook knew that the campaign tried to capitalize on the Foer story.

But Cooper set two rules: The government could not read from the tweet and could not introduce the part of the tweet that referenced the FBI investigation. (I explained what DeFilippis did at more length in this post.)

THE COURT: All right. Mr. DeFilippis, if you can lay a foundation that he had knowledge that a story had come out and that the campaign decided to issue the release in response to the story, I’ll let you admit the Tweet. However, the last paragraph, I agree with the defense, is substantially more prejudicial than it is probative because he has testified that had neither — he nor anyone at the campaign knew that Mr. Sussmann went to the FBI, no one authorized him to go to the FBI, and there’s been no other evidence admitted in the case that would suggest that that took place. And so this last paragraph, I think, would unfairly suggest to the jury, without any evidentiary foundation, that that was the case. All right?

MR. DeFILIPPIS: Your Honor, just two brief questions on that.

THE COURT: Okay.

MR. DeFILIPPIS: Can we — so can we use — depending on what he says about whether he was aware of the Tweet or the public statement, may we use it to refresh him?

THE COURT: Sure. Sure.

MR. DeFILIPPIS: Okay. And then, as to the last paragraph, could it be used for impeachment or refreshing purposes as well in terms of any dealings with the FBI?

THE COURT: You can use anything to refresh.

MR. DeFILIPPIS: Okay.

THE COURT: But we’re not going to publish it to the jury. We’re not going to read from it. And let’s see what he says. [my emphasis]

Having just been told not to read the tweet, especially not the part about the FBI investigation, DeFilippis proceeded to have Mook do just that.

The exhibit of the tweet that got sent to the jury had that paragraph redacted and that part of the transcript was also redacted. But, predictably, the press focused on little but the tweet, including the part that Cooper had explicitly forbidden from coming into evidence.

4. Hearsay about Joffe’s Request for Feedback

As noted above, Judge Cooper permitted just one email between Joffe and the researchers to come into evidence: a request for feedback Rodney Joffe made of the researches. But he did so based on Durham’s representation that either David Dagon or Manos Antonakakis — both of whom received the email — would testify.

Neither did.

During Sean Berkowitz’ cross-examination of Curtis Heide, one of the agents assigned to investigate the anomaly, Sussmann’s attorney had Heide explain how they knew David Dagon had a role in the research, but nevertheless never bothered to speak to him directly.

AUSA Jonathan Algor used that as an opportunity to ask to introduce not just the email that had been permitted, but also the response, claiming that by highlighting how shoddy the FBI investigation was, Berkowitz was opening the door to accuracy questions.

MR. ALGOR: So, Your Honor, there was a good amount of cross-examination regarding David Dagon.

THE COURT: Yes.

MR. ALGOR: And specifically asking about reaching out to him and also going into that he was the source of the white paper and what types of questions you would ask him and all. I think that this goes right to the red herring email.

THE COURT: I’m sorry, the what email?

MR. ALGOR: The red herring email, which you’ve previously excluded. It was Government Exhibit 124, when you would go through what type of questions. Now that Mr. Berkowitz has asked these, I would ask: What would you have asked having to provide data related to it? You know, Were there drafts of the white paper? Would Agent Heide ask who else he communicated with and what he believed regarding all of that data? And so I think he’s opened the door regarding that email.

Berkowitz noted that neither Sussmann nor Heide knew of the email.

MR. BERKOWITZ: Judge, this is not an email that was authored by Mr. Dagon. My cross-examination went directly to their investigation, who they spoke to, who they didn’t speak to. I asked him, he doesn’t know what Mr. Dagon said to Mr. Sussmann, if anything, and he said he didn’t. And I don’t think that opening the door to these communications where there’s no indication that it went to Mr. Sussmann is appropriate.

Cooper ruled that Algor could not introduce the email response.

That did not open the door to the excluded email about which — about what his and the other researchers’ views on the data or motivations may have been. In any case, the emails reflect — or the email reflects the views of Mr. Joffe, not Mr. Dagon, and those views came a full month and a half before the FBI was in a position to interview Mr. Dagon. They are, therefore, not relevant to Mr. Dagon’s views or motivations in any event.

So you can — you can certainly ask him, as you have in direct, what he would have done differently, what he would have questioned Mr. Dagon about, you know, to establish a materiality argument, but we’re not going to get into what the researchers’ motivations were. Okay?

Minutes later, Algor walked how Heide didn’t know any of the people on the email, and elicited from Heide the opinion that even asking the opinion might suggest people were trying to fabricate the data.

Q. Okay. And it — the “from” is Rodney Joffe. Do you see that?

A. Yes.

Q. And then the “to” is to Manos Antonakakis. Do you see that?

A. Yes.

Q. Do you know who that is?

A. I do not.

Q. And David Dagon, do you see that second name?

A. Yes.

Q. Do you know who David Dagon is?

A. No.

Q. You testified —

A. I’m sorry.

Q. — earlier —

A. I never met David Dagon, but I do know that he was the information that the source came forward and said he was potentially the author of the white paper.

Q. Okay. And that’s from a CHS that your team was contacted by?

A. Yes. Yes.

Q. And then, finally, April Lorenzen. Do you know who April Lorenzen is?

A. I do not.

[snip]

Q. Would you also want to know whether the authors of the white paper were trying to make it out so that it wasn’t — so that it couldn’t be understood if you weren’t a DNS expert?

A. That would be important.

Q. And if you could read that last line, please.

A. It says, “Do NOT spend more than a short while on this (if you spend more than an hour you have failed the assignment). Hopefully less.”

Q. And just going back to the line above, it says, without — it says, “NOT to be able to say this is, with out doubt, fact, but to merely be plausible,” would you want to understand that coming from the source of the white paper?

A. Yes.

The discussion of the bench conference immediately after Heide left the stand (Berkowitz generally refrained from objecting to these shenanigans in front of the jury) is entirely redacted. But as noted below, Judge Cooper ultimately excluded the entire email as hearsay introduced without proper foundation.

6. Hearsay Commentary on an Attorney

In the very same sidebar where Judge Cooper excluded the Heide testimony, he also explicitly prohibited prosecutors from tying a research request that Rodney Joffe had given a colleague, Jared Novick, to an attorney. The research request pertained to Richard Burt and Carter Page (among others) at a time both had established ties to Russia. Novick testified to Joffe’s displeasure with his work abilities and it’s quite clear the two don’t like each other.

MR. BERKOWITZ: So with respect, Judge, to that, it sounds as if outside the norm of what he normally does, that he thought it was likely for a political campaign. I’m not sure that his determination that he thought it was for an attorney is relevant. If they want to put in an attorney-client-privileged document that he saw, I think he can do that. But if he says I understood this was going to an attorney connected to the campaign, that’s hearsay. And it really doesn’t have anything to do with Mr. Sussmann, unless they can tie it up in any way.

THE COURT: Is there — is there any link to the defendant?

MR. ALGOR: Your Honor, just that he understood the tasking was related to opposition research regarding Trump; that he was told by Mr. Joffe — and his understanding was — that it was — it was someone tied to the Clinton campaign. But his understanding overall, full context and understanding, regardless of what Mr. Joffe said, was that this was going to someone tied to the campaign; and that also in receiving the document that had attorney-client privilege, that he understood it to be for an attorney.

THE COURT: How is that not hearsay if Mr. Joffe offered for the purpose of showing that, in fact, it was from —

MR. ALGOR: Because it’s a full understanding. It’s not getting into the actual specific statements that Mr. Joffe told him, but just the full context of what he was tasked to do and who the ultimate receiver was.

THE COURT: Okay.

MR. KEILTY: One second, Your Honor.

THE COURT: You can elicit his understanding that it was for a campaign, that it was unusual, that it may have had some political purpose. But I want you to stay away from any suggestion, which I don’t think has been established, that it was from Mr. Sussmann, including by suggesting it was from an attorney. Okay? [my enphasis]

Once again, minutes after Judge Cooper issued an order — this one ruling that Durham’s team could not elicit any reference to an attorney — Algor nevertheless got a former Joffe associate to do so.

Q. And, again, you — during cross-examination, Mr. Berkowitz asked you a series of questions regarding — regarding your work for Mr. Joffe on this project?

A. Uh-huh.

Q. And without getting into any specific conversations, based on the totality of your work, who was the intended audience for the project?

A. It was to go to an attorney with ties.

MR. BERKOWITZ: Objection, Your Honor.

THE COURT: Sustained.

That was the first time Berkowitz started getting really insistent about the pattern of Durham’s prosecutors completely ignoring explicit prohibitions from Cooper.

MR. BERKOWITZ: And — and just briefly, Your Honor, I don’t know when is an appropriate time to — to raise this. I want to express what — and I am not a — a hotheaded person —

THE COURT: You’re not a what?

MR. BERKOWITZ: I’m not a hotheaded person, but I have deep concern over the last line of questioning with the witness eliciting something that I think was clearly prohibited. And it’s consistent, in our view, with the line of questioning relative to Mr. Elias, [sic] relative to them reading the tweet that had been excluded. And, again, I know you don’t apportion bad faith, and I’m not asking you to do that at this point, but I just — I’m — I’m really concerned about the number of those issues that have come in and the prejudice to Mr. Sussmann. And I don’t know how best to deal with it, but I want to raise that to your attention.

Judge Cooper finally warns Durham to follow his orders

The Novick questioning finally stirred Cooper to try to do something about prosecutors flouting his orders. The first thing the next morning, he issued a both-sides warning about adhering to his rulings.

THE COURT: Okay. Good morning, everybody. All right. I just want to return briefly to the discussion we had at the end of the day yesterday.

You know, we’ve been here for two weeks. I have tried my best to let you folks try your cases as you see fit without undue intervention from the Court, as is my usual practice. But I obviously have set some evidentiary guardrails in the case that I expect both sides to follow, and I think you’ve done that for the most part.

Yesterday, however, I thought it was pretty clear — that I was pretty clear that in Mr. Novick’s testimony the government was not to suggest a link between the defendant and — on the one hand, and Mr. Joffe and the researchers’ data collection efforts on the other hand, or their views about the data. I didn’t think there was an evidentiary foundation for that.

I thought that the jury would only be able to speculate about any such connection, and I thought that any knowledge Mr. Novick had about that was necessarily hearsay from Mr. Joffe, who obviously is not here to testify. And I thought, at least, the final question in the redirect that was asked yesterday, nevertheless, attempted to establish such a link.

You know, I know that questions get asked rhetorically or argumentatively that are likely to draw an objection, and I will give lawyers some slack on that, but I expect both sides to comply with my evidentiary rulings.

There’s a lot of evidence in this case. There’s a lot for the jury to digest. They will have plenty of validly admitted evidence to pore over, and from here on out, including in arguments, I expect both sides to comply with both the letter and the spirit of the Court’s evidentiary rulings. So let’s keep it clean from here, okay?

MR. KEILTY: Yes, Your Honor.

Berkowitz used that exchange to request that Cooper exclude the entirety of the email that Algor used to invite Heide to suggest the data had been fabricated as the only way to limit the damage from prosecutors breaking Cooper’s rules.

MR. BERKOWITZ: Thank you very much for that, Your Honor. I have one other request related to it. And I don’t mean to go to the well, but there was an additional line of questioning yesterday related to Government Exhibit 132 with Agent Heide. I’m happy to provide a copy of it, if you would like.

THE COURT: Just remind me what it is.

MR. BERKOWITZ: It’s the document they sought to admit between Rodney Joffe, David Dagon, and Manos Antonakakis, “Is this a plausible explanation?”

THE COURT: Yes, I know that one. Actually, pass it up.

MR. BERKOWITZ: Your Honor, I went back and read the basis for your admitting the document, which was that it was not hearsay because there was a statement, “can you review,” and a question, “is this a plausible explanation?” I think we all contemplated at the time that both Mr. Dagon and Mr. Antonakakis were on the witness list and might testify.

You did allow it in. We didn’t object on the basis that you had previously ruled on it.

The manner in which it was used with the witness, I think, didn’t comply with the spirit of the Court’s ruling. There were questions asked related to “if you had spoken with Mr. Dagon, and you were aware of this communication” words to the effect of “would that have been concerning?”

And the witness — and I’m not suggesting that it was elicited intentionally, but the witness said “it would concern me because it appears as if it’s fabricated.”

Berkowitz noted that (like the Clinton tweet before it, though Berkowitz didn’t make the connection) that exchange got reported in the press.

That’s been reported in the press, even though you struck it from the record at our request.

Our remedy request, Your Honor, in light of that, and in light of the lack of probative value of that document with no connection to Mr. Sussmann, would be to strike the question and answering related to that document, to strike that document from the record, and not allow the prosecution team to use it with any defense witnesses, as well as not to use it in argument because it would have been stricken from the record.

We think the probative value of that document at this stage is minimal, and I expect that if it is published to the jury and used in any way, the jurors will associate it with the fabrication comment. And you worked real hard — and we have all worked really hard — to keep out the accuracy of the data. And the prejudicial nature of the document and the testimony associated with it is something that we think, while it can’t be remedied, and the bell can never be unrung, they should not be reminded and put before them. [my emphasis]

After having just been scolded, DeFilippis nevertheless made a bid to keep the document that might trigger the improperly elicited comment in as evidence.

Michael Keilty — the closest thing to a grown-up on this team — then tried to explain away Algor’s flouting of the rules with Novick.

MR. KEILTY: One last thing, Your Honor, just with respect to the final question to Mr. Novick yesterday. I think Your Honor’s aware that the government obviously did not intend for that — to elicit that answer. Instead, it intended to elicit an answer regarding Mr. Novick’s thoughts about whether this was involved with a political entity or political campaign. We didn’t have the opportunity or the benefit of conferring with Mr. Novick prior to Your Honor’s ruling. So we apologize for that, but we just wanted to put on the record some of the reasons why.

THE COURT: Well, you could have asked, “Without telling me who it came from, what was your understanding of the general nature of the source?” Right?

7. Hearsay on Top of Hearsay about Joffe’s Joke about a Job

But the Durham team’s defiance of Cooper didn’t stop there. While Cooper had permitted (with the proper foundation) a Joffe email that elicited feedback, Cooper had excluded an email — sent to someone never identified as a witness in this case — in which Joffe had joked about working in cybersecurity under a Clinton Administration. Nevertheless, as part of a long exchange with retired FBI Agent Tom Grasso in which DeFilippis asked Grasso materiality questions about stuff he heard about but had no firsthand knowledge of — each time presented as fact rather than as a conspiracy that Durham had explicitly been prohibited from presenting because they hadn’t charged it — Durham’s lead prosecutor raised the allegation he had been prohibited from raising.

Q. So when he came to you or at any time after that, did Mr. Joffe disclose to you whether he was working on this with representatives of the — of a political campaign?

A. He did not, no.

Q. And do you think you’d remember if he had told you at the time, you know, “I’m doing this, working with some folks who are working with the political campaign”?

A. I would think I would remember that, yes.

Q. So Mr. Joffe didn’t tell you — have you heard of a firm called Fusion GPS?

A. I have heard of Fusion GPS, yes, sir.

Q. Okay. And are you generally aware that they had — without getting into any specific work you did, are you generally aware that they had done some work for the Clinton Campaign at the time?

A. Yes, I —

Q. Okay.

A. Yes, I am aware of that, yes.

Q. So Mr. Joffe didn’t say he was working with Fusion GPS on this project?

A. Not that I recall, no.

Q. And Mr. Joffe never told you that, you know, this project had arisen in the context of opposition research that the Clinton Campaign was working on?

A. I do not recall that coming up, no.

Q. If Mr. Joffe had come to you and said, “I’m working with some investigators and some lawyers who are working for the Clinton Campaign, and, you know, that’s part of what I’m doing here with this information, can you please keep my name out of this,” would you have viewed that differently than you viewed the information as you got it?

[snip]

Q. Okay. And in the 2016 election period, you and Mr. Joffe, I imagine, never discussed politics or anything like that?

A. I don’t recall political discussions with him, no.

Q. Okay. And did you — so you certainly didn’t know that he was working with folks affiliated with a particular political party or campaign on what he brought to you, right?

A. I have no recollection of that.

Q. And any recollection of hearing or learning that he was expecting any kind of position in a future political administration?

A. I do not have a recollection of that other than — let me rephrase that. I have a recollection of that being reported in the media, but I don’t have a —

MR. BERKOWITZ: Objection, Your Honor.

THE COURT: Sustained. [my emphasis]

When Berkowitz raised this exchange at the end of the day, Judge Cooper noted that the several meetings they had with Grasso were ample basis for DeFilippis to understand that Grasso had no knowledge of those matters (or, for that matter, the topics covered by that entire line of questioning).

MR. BERKOWITZ: Judge, I regret that I’m going back to this same issue that we started the day with where  you admonished counsel to be careful of the guardrails related to evidentiary rulings. We had another situation n today that I think ran afoul of your comments. There was an email that was the subject of a motion related to Mr. Joffe communicating about a potential job. And in the cross-examination of Agent Grasso there was a question about, “He certainly didn’t know he was working with folks affiliated with a particular political party or campaign when he brought that to you. Right?”

Answer: “I have no recollection of that.” I didn’t object.

And then he followed up with: “And any recollection of hearing or learning that he was expecting any kind of position in a future political administration, knowing that there was nothing in the 3500 materials related to that and knowing an objection that was sustained could elicit a belief that he would do that?”

The witness answered, “I do not have a recollection of that other than — let me rephrase that. I have a recollection of that being reported in the media.”

I objected. Your Honor, they had met with this witness four times. They had pretried him twice. There was nothing in the 3500 material to suggest that he had any belief of that or any recollection or any connection.

And it’s another instance in a litany of instances that’s suggesting to the jury topics and issues that were the subject of your ruling. And I, you know, particularly  with the potential testimony of Mr. Sussmann coming up, I don’t know what else to say or to do, and we’ll consider filing a motion. But I wanted to raise the issue, and I take no joy in continuing to do this. But I cannot stand by while it continues to go on.

DeFilippis at first tried to excuse blowing off Cooper’s ruling by saying that the rules for cross-examination are different. But not if the witness was originally a witness for the prosecution.

THE COURT: Counsel?

MR. DeFILIPPIS: Yes, Your Honor. I guess we’re glad that Mr. Berkowitz raised it in the sense that, you know, typically the rules for cross-examination are different from evidence presented in a case in chief. And if there is a good-faith basis to ask — inquire as to knowledge of a matter, Your Honor, the government didn’t phrase the question tethered to any email or refer to any hearsay.

It was just inquiring as to knowledge and then inquiring as to whether that fact would be relevant to what  it is that Mr. Grasso’s interactions with Mr. Joffe were.

So if, again if the Court wants —-

THE COURT: Counsel, I don’t disagree with that, but you got to have a good faith basis for asking the question. Right? And if you prepped this guy and he’s never said anything about it, then there’s no good-faith basis. Okay? Him reading it in The New York Times or whatever is not a good-faith basis.

Then DeFilippis claimed that the question — which came after two earlier ones in which he asked Grasso questions about things he had “heard of” — was not deliberately intended to elicit such a response.

MR. DeFILIPPIS: Yeah, and to be clear, Your Honor, the portion where he said he read in the — we didn’t know that, and we wouldn’t have intentionally elicited something from a press account. So we will certainly be careful.

THE COURT: He was the defense’s witness here, but he was on your witness list. You should have known. If there was a basis to ask that question, you should have known what it was.

MR. DeFILIPPIS: Yeah. Understood, Your Honor.

Only after this exchange on prosecutors using someone who had originally been a government witness to invite speculation did Cooper exclude the entire email discussion involving Heide.

THE COURT: In that vein, let’s go back to GX-132 the admission of the email did not sit well with me yesterday, and it still does not sit well with me.

The Court ruled that the document was [sic] hearsay originally because it contained a question and a request, as opposed to an assertion. But the Court made clear in its order that, in order to be admitted, it would still need a proper foundation. The witness through which the document ultimately was admitted, albeit not without an objection from the defense, was Mr. Heide, who, as far as I could tell, had no personal knowledge whatsoever of the email. He didn’t know Mr. Joffe. He didn’t know the researchers who received it. He obviously was not a party to the email. So frankly, I don’t see how he could testify to that email in his personal knowledge as required by Rule 602.

So for that reason, I don’t think it was properly admitted through that witness. As I said yesterday, we had expected at least two of the researchers to testify based on who was on the government’s list. And I think it would have been properly admissible through those people to explain how the data came into being  as the Court ruled prior to trial. So I am going to exclude that email as well as any testimony by Mr. Heide describing his interpretation or views or thoughts on the email. Okay?

Conspiracy theory

This repeated defiance of Judge Cooper was treated as one after another evidentiary issue, usually prosecutors sneaking in hearsay with no basis. Ultimately, however, it was about a more basic ruling Judge Cooper had made, that this trial would not be about a conspiracy theory that Durham wanted to criminalize without charging.

As Berkowitz observed in his close,

This case is not about a giant political conspiracy theory. It’s about a short meeting.

[snip]

So the people who were part of this large political conspiracy theory are the people at HFA, Rodney Joffe, and Fusion GPS. They’re the people that are supposedly involved in this conspiracy.

There will be a lot said about this trial, no matter the verdict. But the serial defiance of the Durham prosecutors was a successful attempt to do something else that Judge Cooper had prohibited: to criminalize, under a conspiracy theory, perfectly legal behavior.

OTHER SUSSMANN TRIAL COVERAGE

Scene-Setter for the Sussmann Trial, Part One: The Elements of the Offense

Scene-Setter for the Sussmann Trial, Part Two: The Witnesses

The Founding Fantasy of Durham’s Prosecution of Michael Sussmann: Hillary’s Successful October Surprise

With a Much-Anticipated Fusion GPS Witness, Andrew DeFilippis Bangs the Table

John Durham’s Lies with Metadata

emptywheel’s Continuing Obsession with Sticky Notes, Michael Sussmann Trial Edition

Brittain Shaw’s Privileged Attempt to Misrepresent Eric Lichtblau’s Privilege

The Methodology of Andrew DeFilippis’ Elaborate Plot to Break Judge Cooper’s Rules

Jim Baker’s Tweet and the Recidivist Foreign Influence Cheater

That Clinton Tweet Could Lead To a Mistrial (or Reversal on Appeal)

John Durham Is Prosecuting Michael Sussmann for Sharing a Tip on Now-Sanctioned Alfa Bank

Apprehension and Dread with Bates Stamps: The Case of Jim Baker’s Missing Jencks Production

Technical Exhibits, Michael Sussmann Trial

Jim Baker’s “Doctored” Memory Forgot the Meeting He Had Immediately After His Michael Sussmann Meeting

The FBI Believed Michael Sussmann Was Working for the DNC … Until Andrew DeFilippis Coached Them to Believe Otherwise

The Visibility of FBI’s Close Hold: John Durham Will Blame Michael Sussmann that FBI Told Alfa Bank They Were Investigating

The Staples Receipt and FBI’s Description of Michael Sussmann Sharing a Tip from Hillary

“and” / “or” : How Judge Cooper Rewrote the Michael Sussmann Indictment

 

“and” / “or” : How Judge Cooper Rewrote the Michael Sussmann Indictment

Thanks to those who’ve donated to help defray the costs of trial transcripts. Your generosity has funded the expected costs. If you appreciate the kind of coverage no one else is offering, we’re still happy to accept donations for this coverage — which reflects the culmination of eight months work. 

I’ve been tracking a dispute about the jury instructions in the Michael Sussmann trial, but only got time to check the outcome last night. At issue was whether some of the extraneous language from the indictment would be included in the description of the charge.

Here’s the language the grand jury approved in the indictment.

O]n or about September 19, 2016, the defendant stated to the General Counsel of the FBI that he was not acting on behalf of any client in conveying particular allegations concerning a Presidential candidate, when in truth, and in fact, and as the defendant knew well, he was acting on behalf of specific clients, namely, Tech Executive-1 and the Clinton Campaign. [my emphasis]

Sussmann had wanted the instructions to include that language claiming Sussmann was lying to hide two clients.

Mr. Sussmann proposes modifying the last sentence as follows, as indicated by underlining: Specifically, the Indictment alleges that, on or about September 19, 2016, Mr. Sussmann, did willfully and knowingly make a materially false, fictitious, and fraudulent statement or representation in a matter before the FBI, in violation of 18 U.S.C. § 1001(a)(2), namely, that Mr. Sussmann stated to the General Counsel of the FBI that he was not acting on behalf of any client in conveying particular allegations concerning Donald Trump, when, in fact, he was acting on behalf of specific clients, namely, Rodney Joffe and the Clinton Campaign.5 The government objects to the defense’s proposed modification since it will lead to confusion regarding charging in the conjunctive but only needing to prove in the disjunctive.

When Judge Cooper instructed the jury, however, he rewrote the indictment approved by the grand jury to reflect that maybe Sussmann was just hiding one client.

Specifically, the Indictment alleges that in a meeting on September 19, 2016, Mr. Sussmann did willfully and knowingly make a materially false, fictitious, and fraudulent statement or representation in a matter before the FBI in violation of 18 USC 1001(a)(2); namely, that Mr. Sussmann stated to the General Counsel of the FBI that he was not acting on behalf of any client in conveying particular allegations concerning Alfa-Bank and Donald Trump, when, in fact, he was acting on behalf of specific clients, namely Rodney Joffe or the Clinton Campaign. [my emphasis]

Now, perhaps there was some discussion I missed finding that the government only had to prove Sussmann was hiding one client — the disjunctive proof business, above. And perhaps it will not matter — I think Sussmann’s team raised plenty of issues with Jim Baker’s credibility such that the jury will find the whole prosecution preposterous, but I also think Durham’s team may have thrown enough cow manure at the jury to stifle rational thought.

But this slight change — unilaterally replacing “and” with “or” — seems to intervene to help Durham recover from one of the most abusive aspects of the prosecution, his failure to take basic investigative steps before charging Sussmann.

As I’ve repeatedly shown, Durham did nothing to test Michael Sussmann’s sworn explanation for his meeting with Jim Baker — that he wanted to give the FBI an opportunity to intervene before a shitshow story happened during election season — before charging. He spent months and months after the indictment scrambling to find the documentation for the efforts the FBI made to kill the NYT story (and ultimately only found part of that documentation), evidence he should have consulted in advance.

Durham also never subpoenaed Jim Baker for related materials before charging this.

Those two facts are how it was possible that Baker only discovered the September 18, 2016 text in which Sussmann explained he was trying to help the FBI on March 4, 2022, almost six months after the indictment (though Andrew DeFilippis misrepresented this at trial).

We also know from Sussmann’s discovery requests that Durham did little to explore Rodney Joffe’s relationship with the FBI before charging. While Durham knew that Joffe had been an informant — and had forced FBI to remove him as such, allegedly as retaliation because Joffe wouldn’t cooperate with Durham’s investigation — it’s not clear whether Durham had found two instances where Joffe had offered up more information about the Alfa Bank allegations to an FBI agent (not his handler) who knew his identity and could easily have shared it with investigators.

In other words, even if you think Sussmann was attempting to hide the Hillary campaign’s role in the underlying allegations (which is different from hiding the campaign’s role in the meeting with the FBI, though Durham’s team surely hopes the jury misses the distinction), the trial actually presented a fair amount of evidence that Sussmann wasn’t hiding Joffe’s role. The FBI knew of Joffe’s role within days of Sussmann’s meeting.

For months, Durham has been spinning a wild conspiracy theory claiming Joffe had direct ties to the Hillary campaign that he simply didn’t have. That is the conspiracy theory he laid out in the indictment. That is the conspiracy theory he should be held to.

But Cooper rewrote that part of the indictment such that Durham is not being held to his own conspiracy theories when it matters.

OTHER SUSSMANN TRIAL COVERAGE

Scene-Setter for the Sussmann Trial, Part One: The Elements of the Offense

Scene-Setter for the Sussmann Trial, Part Two: The Witnesses

The Founding Fantasy of Durham’s Prosecution of Michael Sussmann: Hillary’s Successful October Surprise

With a Much-Anticipated Fusion GPS Witness, Andrew DeFilippis Bangs the Table

John Durham’s Lies with Metadata

emptywheel’s Continuing Obsession with Sticky Notes, Michael Sussmann Trial Edition

Brittain Shaw’s Privileged Attempt to Misrepresent Eric Lichtblau’s Privilege

The Methodology of Andrew DeFilippis’ Elaborate Plot to Break Judge Cooper’s Rules

Jim Baker’s Tweet and the Recidivist Foreign Influence Cheater

That Clinton Tweet Could Lead To a Mistrial (or Reversal on Appeal)

John Durham Is Prosecuting Michael Sussmann for Sharing a Tip on Now-Sanctioned Alfa Bank

Apprehension and Dread with Bates Stamps: The Case of Jim Baker’s Missing Jencks Production

Technical Exhibits, Michael Sussmann Trial

Jim Baker’s “Doctored” Memory Forgot the Meeting He Had Immediately After His Michael Sussmann Meeting

The FBI Believed Michael Sussmann Was Working for the DNC … Until Andrew DeFilippis Coached Them to Believe Otherwise

The Visibility of FBI’s Close Hold: John Durham Will Blame Michael Sussmann that FBI Told Alfa Bank They Were Investigating

The Staples Receipt and FBI’s Description of Michael Sussmann Sharing a Tip from Hillary

 

The Staples Receipt and FBI’s Description of Michael Sussmann Sharing a Tip from Hillary

Thanks to those who’ve donated to help defray the costs of trial transcripts. Your generosity has funded the expected costs. If you appreciate the kind of coverage no one else is offering, we’re still happy to accept donations for this coverage — which reflects the culmination of eight months work. 

Both sides in the Michael Sussmann case will give their closing arguments today. I’ll try to watch the live tweets, but will be driving around Achill Island so likely will have little Internet access.

I have yet to see the jury instructions, which will dictate a few details of the closing arguments. Most important — as I have noted before — is whether Durham will have to prove the actual allegations in his indictment.

Mr. Sussmann proposes modifying the last sentence as follows, as indicated by underlining: Specifically, the Indictment alleges that, on or about September 19, 2016, Mr. Sussmann, did willfully and knowingly make a materially false, fictitious, and fraudulent statement or representation in a matter before the FBI, in violation of 18 U.S.C. § 1001(a)(2), namely, that Mr. Sussmann stated to the General Counsel of the FBI that he was not acting on behalf of any client in conveying particular allegations concerning Donald Trump, when, in fact, he was acting on behalf of specific clients, namely, Rodney Joffe and the Clinton Campaign.5 The government objects to the defense’s proposed modification since it will lead to confusion regarding charging in the conjunctive but only needing to prove in the disjunctive.

4 Authority: Indictment.

5 Authority: Indictment.

Durham’s single witness is the only one who claims to have remembered this meeting, but he has had about six different memories of the meeting, and Sussmann made a really good case that Baker’s evolving testimony (as well as that of several other witnesses) is an attempt to avoid legal jeopardy himself. Sussmann has shown a receipt that did not bill his $28.00  taxi to Hillary, and I believe he affirmatively took the meeting time off his bill to Hillary before the election (though I need to check the records).

That leaves Durham with a September 13, 2016 $12.99 receipt for two thumb drives and a Google map from his office to Staples to buy it.

BY MR. KEILTY: Q. Ms. Arsenault, what, generally, is this document?

A. This is an expense report we received from Perkins Coie.

Q. And can you walk the jury through the information in this document.

A. Sure. In the top left corner, the report name is “Purchase of flash drives” on September 13, 2016. The expense owner is Michael Sussmann. The submission date is September 22nd in 2016. If you go all the way down to the allocation summary, the allocations charged is 116514.0001, confidential, for $58.56.

Q. Ms. Arsenault, in your review of records, have you seen that number under the allocations charged, the 116514.0001 number before?

A. I have. Q. Is that related to a certain client?

A. Yes.

Q. What client is that?

A. It’s Hillary For America.

MR. KEILTY: Okay. Mr. Algor, can we next look at Government Exhibit 553.19 — I’m sorry, can you leave it there. (Pause) Can you go down to the next document in 380.

(Pause) Okay. And could you go down to the next document, please, in the same exhibit. Could you blow this up, please.

Q. Ms. Arsenault, what is this particular document?

A. This is the receipt for the expenses reflected in the previous two pages of the expense report.

Q. And was this receipt contained in the records the government obtained from Perkins Coie?

A. It was.

MR. KEILTY: And if you go about halfway down the document, Mr. — sorry, the receipt. Could you blow up the section where it says “PNY 2 Pack,” Mr. Algor. Thank you.

Q. Ms. Arsenault, I think you might have said this, but where is this receipt from? A. Staples.

Q. And what does the blown-out part say?

A. “PNY 2 pack 16GB,” as in gigabyte. And then there’s a UPC code. And the cost was $12.99.

MR. KEILTY: Okay. And moving out of that, can you just blow up the address of the Staples.

Q. Okay. And what’s the address?

A. 1250 H Street N.W., Suite 100, Washington, D.C., 20005.

MR. KEILTY: Okay. And can we please pull up Government Exhibit 553.19 in evidence.

Q. Ms. Arsenault, what are we looking at in Government Exhibit 553.19?

A. This is a disbursement report from the billing records from Perkins Coie.

Q. Okay. And can you walk the jury through this — the blown-out part of this report.

A. The client assigned for this disbursement is Hillary For America. The matter is General Political Advice under 116514.0001. And the description is “Sussmann, Michael A. – M. Sussmann, purchase of new, single use flash drives for secure sharing of files, 9/13/2016.”

Q. Okay. And finally, Ms. Arsenault, I’m going to show you what’s been marked for identification as Government Exhibit 63, which will show up on your screen. Ms. Arsenault, what is Government’s Exhibit 63?

A. It’s a Google map displaying the directions between the office for Perkins Coie to the address listed on the Staples receipt.

Q. And did you create Government Exhibit 63?

A. I did.

Q. And how did you create Government Exhibit 63?

A. I went on Google and I typed in both addresses, and I printed the result.

MR. KEILTY: Your Honor, the government would move Exhibit 63 into evidence.

MR. BOSWORTH: No objection.

THE COURT: So moved.

MR. KEILTY: Mr. Algor, can you blow that up.

Q. Okay. And, Ms. Arsenault, on this map Perkins Coie is listed, is that correct, with the red dot?

A. Yes.

Q. And then there’s a series of blue dots, which apparently lead to a blue bubble; is that correct?

A. Yes.

Q. And what is that blue bubble? What address is that?

A. The blue bubble represents the address listed on the Staples receipt, which is 1250 H Street N.W., Washington, D.C., 20005. [my emphasis]

I expect Durham introduced the map to show that Sussmann went to buy these thumb drives immediately after some phone call or meeting.

As described, there are so many ways to explain these thumb drives. Remember: Sussmann admits he shared the story with the press and wanted it to come out. What he denies is that his intent in going to the FBI was in getting them to investigate to serve the story.

Durham will also claim, probably falsely, that Fusion or Sussmann had to have told Mark Hosenball about the investigation; I know of no evidence that’s the case, Durham’s repeated efforts to misrepresent the timeline on Fusion emails suggests he doesn’t have that evidence, and plenty of reason to believe there are other ways he could have learned about this.

Perhaps Durham has more somewhere.

But, particularly depending on the outcome of that jury instruction, even that receipt may not be enough. That’s because Sussmann has presented this piece of proof about how the FBI understood his tip.

One of the first people to respond to this tip (this text is likely in UTC, not ET, so this is likely at 4:31 on September 19, four hours after the meeting) understood it to be:

  • A tip about a Trump company, not Trump himself
  • From the DNC and Clinton
  • Bringing information a private cyber group had identified

That is, whatever Sussmann said in the meeting with Jim Baker, the best representation of what the FBI understood showed him identifying both his possible clients. And identifying a tip not about Trump himself, but his corporate person and a Russian bank that the FBI understood to have ties to Russian intelligence.

It’s hard to claim this alleged lie was material if the FBI responded to it as if he had fully disclosed both Hillary and private researchers like Rodney Joffe’s role in it.

Update: Corrected two errors (the UTC conversation and a spelling error). To make up for not covering the trial live, here’s my excuse

Update: Here’s Sussmann’s Rule 29 motion for a judgment of acquittal. This is a routine motion defendants always file. Because of the political nature of the case, Judge Cooper would never grant it. And there’s nothing terribly exciting in it.

OTHER SUSSMANN TRIAL COVERAGE

Scene-Setter for the Sussmann Trial, Part One: The Elements of the Offense

Scene-Setter for the Sussmann Trial, Part Two: The Witnesses

The Founding Fantasy of Durham’s Prosecution of Michael Sussmann: Hillary’s Successful October Surprise

With a Much-Anticipated Fusion GPS Witness, Andrew DeFilippis Bangs the Table

John Durham’s Lies with Metadata

emptywheel’s Continuing Obsession with Sticky Notes, Michael Sussmann Trial Edition

Brittain Shaw’s Privileged Attempt to Misrepresent Eric Lichtblau’s Privilege

The Methodology of Andrew DeFilippis’ Elaborate Plot to Break Judge Cooper’s Rules

Jim Baker’s Tweet and the Recidivist Foreign Influence Cheater

That Clinton Tweet Could Lead To a Mistrial (or Reversal on Appeal)

John Durham Is Prosecuting Michael Sussmann for Sharing a Tip on Now-Sanctioned Alfa Bank

Apprehension and Dread with Bates Stamps: The Case of Jim Baker’s Missing Jencks Production

Technical Exhibits, Michael Sussmann Trial

Jim Baker’s “Doctored” Memory Forgot the Meeting He Had Immediately After His Michael Sussmann Meeting

The FBI Believed Michael Sussmann Was Working for the DNC … Until Andrew DeFilippis Coached Them to Believe Otherwise

The Visibility of FBI’s Close Hold: John Durham Will Blame Michael Sussmann that FBI Told Alfa Bank They Were Investigating