Unsealed Mueller Report Passages Confirm the Then-Ongoing Investigation into Roger Stone

BuzzFeed released the last bits of the Mueller Report that Judge Reggie Walton ordered released late last night. I will have far more to say about them between meetings later today.

But for now, I want to point to the key paragraph on why Mueller didn’t charge Roger Stone in the hack-and-leak case. Basically, it says that neither Corsi’s testimony nor “other evidence currently available to the Office” is sufficient to prove that when Stone was coordinating the Podesta file dump, he knew that Russians continued to hack Democratic targets.

But then it includes a footnote that says there are “ongoing investigations” (plural) that the DC US Attorney’s Office will continue to pursue to try to address these factual uncertainties.

The Office determined that it could not pursue a Section 1030 conspiracy charge against Stone for some of the same legal reasons. The most fundamental hurdles, though, are factual ones.1279 As explained in Volume I, Section III.D.1, supra, Corsi’s accounts of his interactions with Stone on October 7, 2016 are not fully consistent or corroborated. Even if they were, neither Corsi’s testimony nor other evidence currently available to the Office is sufficient to prove beyond a reasonable doubt that Stone knew or believed that the computer intrusions were ongoing at the time he ostensibly encouraged or coordinated the publication of the Podesta emails. Stone’s actions would thus be consistent with (among other things) a belief that he was aiding in the dissemination of the fruits of an already completed hacking operation perpetrated by a third party, which would be a level of knowledge insufficient to establish conspiracy liability. See State v. Phillips, 82 S.E.2d 762, 766 (N.C. 1954) (“In the very nature of things, persons cannot retroactively conspire to commit a previously consummated crime.”) (quoted in Model Penal Code and Commentaries § 5.03, at 442 (1985)).

1279 Some of the factual uncertainties are the subject of ongoing investigations that have been referred by this Office to the D.C. U.S. Attorney’s Office.

As I described in May, in fall 2018, Mueller’s team took a bunch of investigative steps that they kept under seal. Then, they used the witness tampering case to obtain more information.

It’s unclear how much closer prosecutors got to proving the hack-and-leak case (though they obviously obtained Andrew Miller’s testimony, which was evidence not “currently available” when the Mueller Report was written). But there also appears to be evidence that, by intervening in the Stone sentencing, leading all the prosecutors to drop off the case, Bill Barr killed that part of the investigation.

Prosecutors were still working on proving Stone’s role in the hack-and-leak in March 2019. What’s unclear is how much closer they had since gotten to charging it before Barr intervened.

Bill Barr’s DOJ Protecting Sean Hannity the Cut-Out

Today, DOJ will have to release a less-classified version of the Mueller Report and another batch of 302s in the BuzzFeed FOIA. Then, after the election, Jason Leopold’s lawyers and DOJ start fighting over all the things DOJ withheld, including Mike Flynn’s 302 (which DOJ withheld because DOJ is trying to blow up his prosecution and releasing them publicly would make it clear his lies were material).

While we’re waiting, I wanted to point to a paragraph from an October 11, 2018 Paul Manafort interview that was wrongly withheld.

DOJ redacted Sean Hannity’s name, perhaps to make it harder to demonstrate that Manafort’s claim was a lie.

This is a reference to text messages Manafort had with Sean Hannity. Judge Amy Berman Jackson unsealed them during Manafort’s sentencing, making them a public official DOJ document. The texts show Manafort acknowledging the gag ABJ imposed.

Less than a week later, Manafort says they’ll have to hold off on talking until he gets bail, and Hannity passes on what appears to be word from Trump, that unless Jeff Sessions appoints a special prosecutor to investigate Uranium One, he’ll be gone.

In December, after Mueller’s team busts Manafort for working with Konstantin Kilimnik to edit an oped to run in Kyiv, Manafort tells Hannity he has to delay talking to him until they get past a hearing on that violation of ABJ’s gag order.

In early January, Manafort talks about having his lawyer (probably Kevin Downing) do an interview with Hannity about a civil suit he filed against Mueller as a way around the gag.

Again in January, Manafort says he needs to have his lawyer meeting with Gregg Jarrett to talk about their plans to try to get Andrew Weissmann thrown off the team.

On January 24 and 25, 2018, Manafort tells Hannity that Kevin Downing will be calling him.

On the 25th, Hannity confirms that he did speak with Downing and insists that Downing feed him “everyday.” Manafort says he will.

In May 2018, Manafort tells Hannity to look for his filing claiming the Mueller team was illegally leaking.

In May, Manafort asks Hannity if he’ll pitch his defense fund. Hannity says he will when Manafort and his lawyer are on.

Manafort insists to Hannity that his leaks filing exposes Weissmann misconduct. Hannity explains that Jarrett did not share the filing with him, so asks Manafort to sent it to his (!!!) AOL.Com address.

After Manafort gets busted for witness tampering, Manafort texts Hannity and insists it was bullshit.

And then Paulie goes to prison and the texts end.

Throughout the exchanges — particularly with that meeting between Downing and Hannity on January 24, 2018 — it’s clear Manafort is feeding Hannity.

And, as Weissmann got permission to include include in his book, the Muller team analyzed the texts and mapped how comments Manafort shared showed up in Hannity’s broadcasts.

At the same time the Manafort allies were working Gates over, dangling the prospect of money and a White House pardon, they were also fomenting a press strategy to undermine our office’s work, and Team M’s case against him in particular. In the spring of 2018, we discovered a new Manafort account he was using after his indictment in October 2017. As we had done countless times before, we obtained a court order from Chief Judge Howell, served it on the carrier, and soon unexpectedly had in our hands hundreds of texts between Manafort and the Fox News host Sean Hannity.

In one text exchange, during the weeks in which we were working to flip Gates, Manafort assured Hannity that Gates would stay strong and never cooperate. In others, he supplied Hannity with a cache of right-wing conspiracy-laden ammunition with which to attack Mueller, me, and the Special Counsel’s Office as a whole—some of it, Manafort claimed, had been passed on from sources within the Justice Department. Manafort, who was under house arrest at the time, assured Hannity that Manafort’s counsel would be in touch with him. Hannity worked this information into the tirades against us that he performed almost nightly on the air.

At the time, remember, Manafort was under indictment for the same charges as Gates; both were out on bail with strict pretrial conditions. Communicating with Hannity about the case was a violation of the gag order Judge Jackson had put in place on both sides so as not to taint the jury. But Manafort was undeterred by such legal niceties as a court order; he was doing what he did best: surreptitiously cooking up a smear campaign, then using Hannity to disseminate it, thereby contaminating the political discourse.

A Team M analyst correlated the texts to the Hannity Fox News programs that then aired in support of Manafort. The texts revealed a media plan that was just like the work he’d done in Ukraine, targeting President Yanukovych’s enemies. Now, however, Manafort was working on his own behalf, launching an assault on a government investigation poised to undo him.

I had wanted to submit the Hannity texts to the court as they revealed a continued flagrant violation of the court’s order, and it was something I believed the judge needed to know as it could well change her view on whether Manafort should remain on bail, or at least whether the conditions of his bail should be tightened up. When I told Aaron this, he had his usual reaction: No one could see these texts. “They are too explosive,” he said. He did not want the inevitable shit storm that would result on Fox and other media outlets, but that was no excuse for not alerting the court to the violation of her order. (I made clear that the court would have to see them at least in connection with sentencing Manafort as it was our obligation not to hide this from the court, which is how these ended up seeing the light of day.) Soon this latest Grant-McClellan standoff would be largely moot when we discovered Manafort’s breach of his bail conditions in a manner that made the gag order violation pale in comparison.

The fact that Weissmann was able to include this detail in his book makes it clear this is not sensitive and, indeed, DOJ considers it public.

And yet DOJ hid the identity of one of the most public men in America to hide the way Fox was running interference for Trump’s criminals.

“Show Me the Metadata:” A Forensic Tie Between Shadow Brokers and Guccifer 2.0

On October 16, 2017, some of the last words the persona Shadow Brokers (TSB) ever wrote hailed my journalism.

TSB special shouts outs to Marcy “EmptyWheel” Wheeler, is being what true journalist and journalism is looking like thepeoples!

TheShadowBrokers, brokers of shadows.

As I noted at the time, I really didn’t need or appreciate the shout-out. I wrote a serious post analyzing that TSB post, but mostly I was trying to tell TSB to fuck off and leave me alone.

That was months after I told the FBI that I thought that someone I knew, whom I will refer by the pseudonym “Phil,” might be the voice of TSB, and less than a week after I got a Psycho-themed threat I deemed worthy of calling the cops.

As I laid out here, I told the FBI that months before Phil had left a comment on my site on July 28, 2016, signed [email protected], he had done some paranoid things starting on June 14, 2016, including making multiple references to ties he claimed to have with Russia. He then attended a Trump rally on August 13, 2016, taking pictures he would later suggest were really sensitive.

In addition to my suspicions about Guccifer 2.0, I also told the FBI that I suspected Phil was part of the operation that had been dumping NSA exploits and other records on the Internet starting in August 2016.

Unlike with Guccifer 2.0, Phil never signed a comment at the site under the name TSB — though on September 21, 2017, someone left a comment asking for my opinion about the ways the government was pursuing TSB.

‘Merican

September 21, 2017 at 1:58 am

Is what you say easier get FISA than Criminal warrant or FISA keep secret from rest of government, but Criminal warrant maybe not? FBI is not intelligence agency is law enforcement agency why have access FISA? You write many articles about the shadow brokers, what you think FISA or Criminal for the shadow brokers? You thinking anyone in US government is looking for the shadow brokers? US government not even say name “name that shall never be spoken”. What is best way discover national security letter sent to your service provider? …asking for a friend!

I thought Phil might be TSB, in part, because Phil had said almost identical things to me in private that TSB said publicly months later. There were other things in TSB’s writing that resonated with stuff I knew about Phil. And while Phil and I never (as far as I recall) talked about TSB, at least once he did say some other things that went a long way to convincing me he could be TSB; I thought he was seeking my approval for what TSB was doing, approval I was unwilling to give.

There are, however, public exchanges between the persona TSB and me, in addition to that shout out in what turned out to be TSB’s swan song.

For example, after I wrote a post on January 5, 2017 wondering why the government hadn’t included TSB in any of its discussions of election year hacking, TSB tweeted to me, complaining that I had described TSB as “bitching” about the coverage, rather than calling it “trolling.” (Note, the language in these screen caps reflects the language used by the people who first archived these tweets, so don’t go nuts about the Russian.)

TSB then RTed my article, suggesting other outlets were complicit for not asking the same questions.

The first tweet, at least, didn’t adopt the fake Borat voice that TSB used to mask a very fluent English, though I think there were some other tweets TSB sent that day where that may be true as well. In neither of these tweets did TSB mock me for misspelling “Whither” (the post’s title originally spelled it “Wither”); that’s a bit odd, because TSB rarely passed up any opportunity to be an asshole on Twitter.

Then, on July 18, 2018, after I had revealed I had shared information with the FBI, someone started a Twitter account under the name LexingtonAl that ultimately claimed to be — and was largely viewed as, by those who followed it — TSB (the persona deleted most tweets in February 2019, but many are saved here). Starting in December 2018, Lex and I had several exchanges about what TSB had actually done. 

Here’s my side of one from that month where I pointed out a problem with Lex’s claim that TSB consisted of just three contractors who leaked the files to reveal US complicity with tech companies to other Americans. The claim didn’t accord with having sent the files to WikiLeaks (as both WikiLeaks and TSB claimed in real time).

At the time, Lex went on an anti-Semitic rant about things he hated. Assuming that Lex is TSB (as he claimed), I got demoted from being TSB’s favorite journalist to third on the list of things Lex hated.

Note: when I interacted with Phil, he was never anti-Semitic (though he was a raging asshole when angry), but Lex was clearly even more disturbed than Phil was in the period when I interacted with him.

Then, in January, Lex bitched (again, in anti-Semitic terms) about a post I had done noting that, given Twitter’s poor security at the time, the Twitter DMs that Hal Martin allegedly sent Kaspersky might have served to frame him.

The post had noted that the early TSB posts — including a number sent after Martin was arrested — had relied on similar cultural allusions as the DMs sent from Martin’s Twitter account. Shortly thereafter the FBI arrested Martin in a guns-wagging raid on his home in Maryland. Per this Kim Zetter story, the Tweets had mentioned the 2016 version of Jason Bourne and Inception. I reiterated that on Twitter.

It was a factual observation supported by the content of the earlier TSB posts, not a comment about any spookiness behind the release of the files.

I asked why TSB was so defensive about having those cultural allusions called out.

Lex responded with another anti-Semitic rant.

I responded,

Finally, in February 2019, Lex invoked me — including that I had “had a breakdown and outed her source” — sort of out of the blue in the middle of what might be called his claimed doctrine behind the leaks.

I noted that if his claimed doctrinal explanation were true, then TSB would have done a victory lap (and stopped dropping files) when Microsoft President Brad Smith started advocating for a Digital Geneva Convention in February 2017, which would have brought about an end to the practice that, Lex claimed, was his reason for dumping the files.

Not only didn’t TSB mention that in real time (instead choosing to exacerbate the tensions between the US and Microsoft), but TSB kept dropping files for six months after that.

Lex responded with another attack.

I have far less evidence that I could share to prove that TSB or Lex are Phil. But little noticed in the midst of TSB’s widely-discussed obsession with Jake Williams, a former NSA hacker whom TSB probably tried to frame as the source of the files, TSB also had an obsession with me — and certainly took notice when I revealed that I had gone to the FBI.

All that said, virtually all of these communications post-dated the time when I went to the FBI.

I went to the FBI in the wake of the WannaCry attack. The attack, reportedly a North Korean effort to make use of the tools dropped by TSB that went haywire, ended up causing a global worm attack that shut down hospitals and caused hundreds of billions of dollars in damage. When I have alluded to the ongoing damage I was trying to prevent, that’s what I mean: the indiscriminate release of NSA exploits to the public which, in that case, literally shut down hospitals on the other side of the world. 

There’s no defense for that.

While I had been trying to find some way to share my concerns long before that, I may never have met directly with the FBI about any of my suspicions except for another detail: I learned that there was a forensic tie between the Guccifer 2.0 and TSB personas. While, at the time, I had moderate confidence about both my belief that Phil had a role in the Guccifer operation and moderate confidence that he was TSB, when I learned there was a forensic tie between the two of them, it increased my confidence in both. 

A strong caveat is in order: the forensic tie isn’t decisive; it could be insignificant, or untrue.

The forensic tie is that someone logged into one of the Guccifer 2.0 accounts — I think the WordPress account — using the same IP address as someone who logged into the early staging sites — either Pastebin or GitHub — for the TSB operation.

If someone using the same IP address accessed both sites — probably using a VPN — it could mean either that the same person was involved, or whoever staged these things was doing little to cover their tracks and outsiders were accessing their infrastructure. One of the people who told me about this forensic tie interpreted it as a deliberate attempt to tie the two operations together, sort of yanking the government’s chain.

I learned of this forensic tie from multiple people, all of whom are credible. That said, I can’t rule out that they learned it from the same person. No one has reported on this in the years since these operations, even though I’ve tried to get better sourced journalists to go chase it down. Indeed, I recently learned that a top outside expert on issues related to TSB did not know this forensic detail.

The FBI had to chase down a lot of weird forensic shit pertaining to these influence operations, because that’s how this kind of operation works. I have noted in the past, for example, that some script kiddies tried to hijack an early Guccifer 2.0 email account; that was investigated by a Philadelphia grand jury in spring of 2017. So this forensic tidbit could be similarly unrelated to the people behind the operation.

So I don’t want to oversell this forensic tie. I do want to encourage others to try to chase it down. 

But it was something that significantly influenced my understanding of all this in 2017, when files released by TSB had just caused the worst damage of any cyber attack in history, to date.

When I mentioned the forensic tie during my FBI interview, the lead agent responded that they couldn’t confirm or deny anything during the interview. I wasn’t there to get confirmation.

Still, if it’s true — given what we’ve learned since about the Guccifer 2.0 operation — it is hugely significant.

TSB started staging its release — per this really helpful SwitHak timeline — on July 25, the same day Trump directed people to get Roger Stone to chase down the next WikiLeaks releases. The first files were encrypted on August 1, after Stone had already pitched Paul Manafort on a way to “save Trump’s ass.” TSB loaded the NSA files on GitHub just after Stone published a piece suggesting that Guccifer 2.0, and not Russia, had hacked the DNC. TSB went live overnight on August 12-13, not long after Guccifer 2.0 publicly tweeted to Stone, “Thanks that u believe in the real #Guccifer2.” WikiLeaks publicized the effort on August 15, after some private back and forth between Guccifer 2.0 and Stone, including Guccifer 2.0’s question, “thank u for writing back . . . do u find anyt[h]ing interesting in the docs i posted?” And, per the SSCI analysis and my own, WikiLeaks helped to boost TSB the same day Jerome Corsi may have started giving Roger Stone advance information about the content of the John Podesta emails that wouldn’t be dropped for another two months (SSCI appears not to have considered, much less concluded, that Guccifer 2.0 might be Stone’s source).

If the forensic tie between Guccifer 2.0 and TSB is real, it means that during precisely the same period when Roger Stone was desperately trying to optimize the release of the John Podesta files to save his buddies Paul Manafort and Donald Trump, related actor TSB was beginning a year-long effort to burn the NSA to the ground.

Child Rapist George Nader Introduced Dick Cheney and Ahmad Chalabi

Last night, BuzzFeed released the second-to-last dump of 302s in their Mueller FOIA. There’s a ton that’s interesting in it (and I’m just skimming much of it). But — as I said to Jason Leopold — this George Nader interview, by itself, made the FOIA dump worth the price of admission.

There’s a ton of details about how he brokered meetings between Erik Prince and Kirill Dmitriev and lots of significantly redacted discussions of meetings with Don Jr. There’s great theater where, several times, Nader denied something, including meeting “any” Russian government officials at a trip to the St. Petersburg Economic Forum in June 2016, only to have Mueller’s team show him a picture (in the case of Putin) or a text (in the case of his denials that he had met Steve Bannon) that forced him to immediately backtrack off his claims. Nader describes how he — a convicted pedophile during this entire period — could get along with all sides: Clinton and Trump, Iran and Saudi Arabia. Everyone’s favorite child rapist.

But by far the craziest part of this amazing interview — the thing that has my brain reeling this afternoon — has nothing to do with Russia.

In describing his background, you see, Nader claimed that he’s the one who introduced Ahmad Chalabi to Dick Cheney.

For those who don’t remember, Chalabi had a significant role in drumming up the Iraq War (here’s what I wrote after he died in 2015, and here’s a piece I wrote about him 10 years earlier, in advance of my book on such things). So by introducing Chalabi to Cheney, Nader played some role — how big, it’s unclear — in perhaps the single greatest American foreign policy debacle of all time.

And now he’s rotting away in prison for trafficking a boy.

Lindsey Graham Responds to News of Potential Ongoing Crime by Promising to Ignore It

As I have been laying out, there is growing evidence that when DOJ added dates (a misleadingly incorrect one in at least one case) to Peter Strzok and Andrew McCabe notes, they altered the documents in some other ways. At the very least, they redacted protection order footers in the first documents shared with Sidney Powell, but there appear to be other irregularities in the McCabe notes, irregularities that may be far more serious.

And that’s before you get to DOJ’s claims that:

  • They didn’t know the date of the January 5, 2017 meeting (even though documents in the docket make that date clear)
  • The Bill Barnett “report” was a 302
  • Lawyers for Peter Strzok and Andrew McCabe had affirmed there were no (other) alterations to their clients’ notes

Those are all false, and the last one is fairly demonstrably maliciously false.

I’ve been trying to chase down places where original versions of the Andrew McCabe notes might exist, to compare with what got released in the docket. In addition to DOJ IG (which might have the notes in investigative files relating to the Carter Page investigation), I figured the Senate Judiciary Committee should have a copy.

After all, McCabe had been scheduled to testify on October 6, before he canceled on account of the GOP COVID cluster.

So I called the committee spox, Taylor Reidy, asking if they had copies of McCabe’s notes, since I wanted to use them to see whether FBI had committed a crime. She (credibly) claimed not to know about DOJ altering official documents, given the mad rush to confirm Amy Coney Barrett. So I sent her information to help her out.

Thanks for seeing if you can chase down the copies of these documents the Committee has received.

Basically, in some documents shared with Sidney Powell and then loaded to the docket in the Mike Flynn case, FBI had added (incorrect, in at least one case) dates to some Peter Strzok and Andrew McCabe notes, which they subsequently admitted to the court, stating that the alteration was unintentional.

https://www.politico.com/news/2020/10/07/doj-altered-flynn-document-427280

But it’s now clear that the FBI also removed the “protection order” footers in those documents as well (and have restored them in the re-altered documents).

There are a number of other irregularities with the McCabe notes, including that it doesn’t have a declassification stamp, even though the notes talk about Worldwide Threats hearing prep.

So I’m wondering if SJC could release the version of the notes the Committee received so we can understand what those notes originally looked like.

As I know from following the Crossfire Hurricane investigation closely, I’m know the Committee takes alterations of official documents very seriously.

I appreciate any help you can offer to clarify why these documents were altered.

I got no answer yesterday. I pinged her again today, mentioning that I thought Lindsey Graham’s disinterest in what might be a crime in progress newsworthy:

I’m circling back for comment on this.

I’m considering a post reporting on Chairman Graham’s disinterest in evidence that FBI has tampered with evidence to help Mike Flynn and would post it later today.

Thanks in advance.

Reidy responded to my question about DOJ’s current actions by stating that her boss is totally committed to continuing to review events that happened four years ago.

Thanks for your patience, Marcy.

The matter relates to pending litigation and is not something the committee would have access to.

Graham continues to pursue oversight related to the FBI’s handling of Crossfire Hurricane.

And while I followed up to clarify the seemingly shocking detail — that SJC intended to call McCabe as a witness without obtaining any of his records! — it appears to be the case that DOJ didn’t even share those documents with SJC.

I tried again, noting that she hadn’t answered the question I asked.

To clarify, even though you had prepared to have Andrew McCabe testify this month, you intended to do so without his records?

Also, would you like to issue a statement about FBI’s altering documents in the month of September 2020, which is entirely unrelated to the Crossfire Hurricane investigation, and what I asked about? Or does Chairman Graham not intend to exercise oversight over ongoing misconduct happening right now? To clarify, because this will be clear in any post, I’m asking whether Chairman Graham, having been informed of a potential crime happening as we speak on a matter that he has direct oversight over, is going to do anything about it?

I’ve had no response, from which I guess it is fair to conclude that former JAG Officer Lindsey Graham is going to do nothing about what might be a crime in progress.

FBI, for what it’s worth, yesterday referred my questions about why Executive Assistant Director John Brown certified what was almost certainly a classified document for release that lacked any declassification stamp as authentic to DC’s US Attorney’s Office.

I asked again if FBI had comment about the further alterations exhibited in the McCabe document, but got no answer there, either (I’m wondering what will happen if I report that FBI is doctoring documents to the FBI tip line).

It’s really weird that all these people who are supposed to guard the rule of law in this country are so disinterested in what might be a crime in progress.

Update: After I posted, the FBI reiterated that they still want me to ask DOJ why their EAD certified what appears to be a formerly classified document that lacks a declassification stamp.

We are still referring you to DOJ since this pertains to ongoing litigation.

I’m asking again for reference to what policies in question EAD Brown just certified to.

Trump’s Slow-Motion Cover-Up of Erdogan Corruption and Jeff Sessions’ Meeting with Mike Flynn’s Clients

The NYT has a thoroughly damning story about Donald Trump’s serial effort to undermine the sanctions violation case against Halkbank. It describes how after Trump fired Preet Bharara, two of his Attorneys General intervened to limit what Geoffrey Berman’s Southern District of New York could do against the bank. Ultimately, that contributed to Berman’s firing.

These three paragraphs describe the epic corruption laid out in the story.

The president was discussing an active criminal case with the authoritarian leader of a nation in which Mr. Trump does business; he reported receiving at least $2.6 million in net income from operations in Turkey from 2015 through 2018, according to tax records obtained by The New York Times.

And Mr. Trump’s sympathetic response to Mr. Erdogan was especially jarring because it involved accusations that the bank had undercut Mr. Trump’s policy of economically isolating Iran, a centerpiece of his Middle East plan.

Former White House officials said they came to fear that the president was open to swaying the criminal justice system to advance a transactional and ill-defined agenda of his own.

And while the story mentions that Mike Flynn was among those lobbying the President on this topic, along with Rudy Giuliani and Brian Ballard, that’s the only mention of Flynn.

There’s just one mention of Jeff Sessions.

In 2018, Mr. Mnuchin reached out about the scale of a potential fine to Jeff Sessions, the attorney general at the time. Justice Department officials then asked Southern District prosecutors whether the size of the fine they were demanding was negotiable, one lawyer involved in the effort said. The response was affirmative: The amount was less important than securing an admission of wrongdoing.

Both references are rather curious given something that has come out in the Mike Flynn case — ironically, in the documents that DOJ altered and, apparently packaged up for circulation. In a set of Peter Strzok notes describing a meeting talking about the FARA investigation into Flynn, it describes that Attorney General Jeff Sessions met with Flynn’s lobbying clients, including the Turkish Foreign Minister, about Flynn’s case.

Flynn’s supporters take these notes to suggest that DOJ believed that Flynn had complied with the necessary paperwork and didn’t seem to have intentionally represented under the wrong lobbying category.

But the notes make it clear that DOJ still treated Ekim Alptekin as Flynn’s ultimate customer, and not at least one of the ministers the Attorney General had just met with.

It sure seems curious for the Attorney General to chase down a FARA violators’ clients like this.

More Reason to Question the Government’s Treatment of Andrew McCabe’s Notes

In this post, I noted that the three sets of Peter Strzok and Andrew McCabe notes to which FBI added dates (in at least one case, inaccurate dates) had had their Protective Order footers redacted, suggesting someone packaged them up for circulation (probably with two other documents shared that same day, one of which was a frivolous repackaging of Strzok’s texts with Lisa Page).

In this post, I pointed out several other irregularities with McCabe’s notes: that there’s an artifact in the left margin by one of the redactions (multiple people have said this is one or two post-it notes which left a shadow and covered up the margin) and there’s no declassification stamp.

Two more readers of the site have provided further reason to question FBI’s treatment of Andrew McCabe’s notes.

First, a tech expert separated out the objects in the PDF with the altered date, which shows what the original scan of McCabe’s notes looks like. It looks like this:

That is, the redaction that covered up where the footer would say, “SUBJECT TO PROTECTIVE ORDER,” was in the first scan of the document, even though the footer would be applied later (the Bates stamp and the Protective Order footer show up as metadata in the PDF).

Meanwhile, Cannonfire did some more toying with the document in PhotoShop, and shows that the Bates stamp footer and the redaction are of a different quality than everything else on the page.

It makes sense that the Bates stamp footer is–those are added at a later stage to the document along with the Protective Order stamp.

But for this document to have been produced in this way, the Protective Order stamp would have had to have been redacted out at a later date.

Both of those details suggest that the footer was redacted at a later date.

More Irregularities with the Andrew McCabe Notes: Bleg for Graphic Design Analysis

The Andrew McCabe notes just certified on Monday as a regular FBI document have at least four and, I think, more irregularities. This kind of graphic analysis is not my forté, so I’m going to just post what I think the irregularities are, and invite some people who are better at this to test my hypotheses.

Here’s an annotated version of the McCabe notes (here’s the original). Below, I’ll describe what I think I’m seeing.

A: The left-hand rule of the notebook at the top of the page appears not to line up with the left-hand rule at the bottom of the page. To be sure, I’ve just sketched this up, and it’s the observation I’m the least confident in, so please check my work. [Note: This may arise from copying the notebook.] Update: a reader has convinced me I’m wrong about this — see below.

B: There’s a non-horizontal line drawn to the margin to the left of where the first big redaction begins. Below it, the horizontal page rules don’t appear for about nine lines.

C: As noted here, the footer reading, “SUBJECT TO PROTECTIVE ORDER,” has been redacted. It would be restored in the re-altered version authenticated on Monday.

D: As DOJ has now admitted, someone — and DOJ has not told Judge Emmet Sullivan what government agent it was — added a date. DOJ claimed this was done with a clear sticky with a blue tab, but there’s no sign of the blue tab. Moreover, when the document was re-altered to remove the date, that was accomplished by digitally whiting it out (not the technical term!), leaving a clean white rectangle with no rules.

E: This document has no declassification stamp. The larger redaction here, by topic, must hide notes from a prep session for the World Wide Global Threats hearing that would be held on May 11, 2017. It is, by definition, classified (indeed, that’s presumably the claimed reason for the redaction). And yet there is no declassification stamp for the document. The Peter Strzok notes released in the same batch have declassification stamps dated September 17 and 21.

This document got released after a dispute between McCabe and the FBI about whether he can access his own notes. After the Senate Judiciary Committee promised Andrew McCabe he could review his notes before testifying before the committee in early September, and after McCabe’s lawyer Michael Bromwich engaged in what he believed to be a good faith discussion about obtaining those documents on September 15, on September 16, FBI told the Committee that the request was “unmanageably voluminous;” the Committee passed that determination onto McCabe’s team. On September 18, McCabe’s lawyers worked with FBI’s OGC to narrow the request. One thing FBI lawyers were balking at, categorically, was providing McCabe’s calendars. In addition, they complained that if McCabe reviewed his own notes, he would have access to material beyond Crossfire Hurricane materials (as this page has). On September 23 — the day this document was provided to Flynn’s lawyers by DOJ, according to discovery correspondence — FBI for the first time raised a categorical objection, stating that, the FBI “has a policy of generally not providing documents to former employees and does not see a basis to make an exception to that policy under these circumstances.”

If McCabe had access to his own notes and calendar, he would be able to tell whether this document has been altered beyond the date addition. On the day DOJ sent it out, they decided that McCabe could not be provided access to any of his own notes or calendars so he could provide accurate testimony to Congress.

Update: I have a request for comment from FBI’s press office regarding the lack of a declassification stamp.

Update: FBI referred me to DOJ to ask them why FBI’s EAD certified a declassified document that lacked a declassification stamp.

Update: I have asked the Senate Judiciary Committee (which was supposed to have had McCabe testify earlier this month) for their copy of this set of McCabe notes, to see if we can make sense of the document. I am awaiting a response.

Update: A reader with expertise in the area provides these notes anonymously:

A. yes, the tilt with the line (to the left) at top left, normally would be compensated for with less visible binder rings at bottom right. (to which there is more showing) so its backwards.

B. Yes, agree. The line looks like it was hand drawn. And if you zoom in at 400% in the middle of the red box B) you can see an additional line, very faint. Whited out some way.

C. if you zoom in at 400% at the redaction box, it may have been redacted twice. There are two corners at top left, that are not lined up and same issue at lower right. If they were, it would look like one, clean cornered box.

D. the lines on each side of the date are fainter and in the same distance from each other implying that there was some kind of clear sticker put on top with a handwritten date in the center. When scanning light bounces off the sides of any clear plastic tab, mylar etc. and reflects and fades out whatever is next to it.

E. No opinion.

Other observations:

If you zoom in at 400% in between each of the 3 lines at the lower left (just above the redaction box) there are other faint lines, which make no sense.

At the 3 lines above the handwritten text “possible”, it looks like there was some handwritten text there before, the dot patterns resemble writing that was there once upon a time. Can’t prove it. I don’t have iText redaction software to see if that would show editing (it may be capable or may not), but the scanner would also have to have extra dirt on that area, and doesn’t have the same intensity of dot/dirt scatter as the rest of the white spaces on the rest of the page. Same issue under the 3-6 lines under the text “not the strongest”.

Update: A different reader, who also asks to remain anonymous, sends this screencap of the document pulled into Photoshop and darkened, which (the person explains) can show things that aren’t otherwise readily apparent. The person added a ruler which, I think, shows I’m wrong about the left margin. I’ve crossed out that observation above accordingly.

The Altered Andrew McCabe and Peter Strzok Documents Were Packaged for Circulation

On September 23, 2020, prosecutor Jocelyn Ballantine sent five documents to Sidney Powell:

  • The altered January 5, 2017 Strzok notes
  • The second set of altered Strzok notes
  • The altered Andrew McCabe notes
  • Texts between FBI analysts
  • A new set of Strzok-Page texts, which included new Privacy Act violations

The letter Ballantine sent accompanying those documents is dated September 23, but it wasn’t loaded to the docket until September 28. Like all her discovery letters, the version of the letter uploaded to the docket informs Powell that, “These materials are covered by the Protective Order entered by the Court on February 21, 2018.”

In her letter providing realtered sets of the notes, the only change Ballantine described to the documents pertained to the removal of the sticky notes — which weren’t actually removed, but instead whited out electronically (and probably weren’t sticky notes in McCabe’s case at all).

But there was another change made to all of them: the “subject to protective order” footnote was restored to the documents.

The altered January 5, 2017 Strzok notes, without the footer:

The realtered January 5, 2017 Strzok notes, with the footer:

The second set of Strzok notes (originally altered to read March 28), without the footer:

The second set of Strzok notes, with the footer.

The altered McCabe notes, with the footer redacted out:

The realtered McCabe notes, with the footer unredacted:

Notably, there’s no declassification stamp on McCabe’s notes.

The Page-Strzok notes don’t have a protective order footer. Nor do the FBI analyst texts.

So all the documents sent to Sidney Powell on September 23 had no protective order stamp, and in the case of McCabe’s notes, they had the protective order stamp covered over.

The altered notes have all since been realtered, and rather than trying to certify the Strzok-Page texts, in today’s declaration, Ballantine just told Judge Emmet Sullivan DOJ wasn’t relying on them — no blood no foul. Presumably, there’s something fishy with the FBI analyst texts, because there’s something fishy with all of these documents.

But given the fact that the protective order footer was redacted in the McCabe notes, it cannot be accidental. These documents — the documents with the “inadvertent” alterations — also were all packaged up such that if Sidney Powell shared them (say, with the President’s campaign lawyer), Powell could claim these were somehow exempt.

DOJ Falsely Claimed that McCabe and Strzok Confirmed that the Content of Their Notes Was Not Altered

I wrote a really long post cataloging all the problems with DOJ’s declaration of authenticity in the Mike Flynn case.

But the most important paragraph in the declaration has an astounding claim: that DOJ — in a declaration signed by Jocelyn Ballantine — affirmed that lawyers for both Peter Strzok and Andrew McCabe had confirmed that their clients’ notes were not altered. [Emphasis original]

The government acknowledges its obligation to produce true and accurate copies of documents. The government has fully admitted its administrative error with respect to the failure to remove three reviewer sticky notes containing estimated date notations affixed to three pages of undated notes (two belonging to former Deputy Assistant Director Peter Strzok, and one page belonging to former Deputy Director Andrew McCabe) prior to their disclosure. These dates were derived from surrounding pages’ dates in order to aid secondary reviewers. These three sticky notes were inadvertently not removed when the relevant documents were scanned by the FBI for production in discovery. See ECF 259. The government reiterates, however, that the content of those exhibits was not altered in any way, as confirmed by attorneys for both former FBI employees.

But the declaration and related filings only reflects communication from Aitan Goelman, Strzok’s lawyer.

Indeed, in the letter that McCabe’s lawyer sent to the court on October 2, he pointedly said that DOJ had not asked him to confirm the accuracy of its claims about the notes before filing them.

So I asked Michael Bromwich, McCabe’s lawyer, if he agrees with the assertion Ballantine made in yesterday’s filing. He told me he spoke with Ballantine a few weeks ago and doesn’t recall any such discussion.

But when he got an email from her on Sunday at 4PM, asking for him to let her know by 2PM Monday if her transcription was inaccurate, he pointedly declined to do so.

I have spoken with Mr. McCabe and he declines to provide you with any information in response to your request.

He believes DOJ’s conduct in this case is a shocking betrayal of the traditions of the Department of the Justice and undermines the rule of law that he spent his career defending and upholding. If you share with the Court our decision not to provide you with assistance, we ask that you share the reason.

We would of course respond to any request that comes directly from the Court.

That is, Ballantine claimed that Bromwich had affirmatively confirmed this content.

But Bromwich very pointedly refused to do so.

For what it’s worth, I think the content has not been altered, but the redactions do misrepresent the notes. But according to Bromwich, Ballantine made that claim even though he had pointedly refused to confirm the accuracy of the notes or transcription.

Update: And now Strzok says that they didn’t confirm the content either.

That’s more problematic in his case, because there are so many more transcripts.

Update: The same thing happened with Strzok (though his lawyer did alert Ballantine to her docket/exhibit problems I noted in this post).

Ballantine emailed Goelman at 4:05 on Sunday with the same request. He responded at 3:38 PM on Monday, telling her they could not confirm authenticity of these notes without the originals. He also noted that Ken Kohl misrepresented the meaning of one of Strzok’s texts in the hearing before Judge Sullivan.

Sorry not to get back to you until now.  We have looked at the attachments to the email you sent yesterday (Sunday) afternoon.  We are unable to certify the authenticity of all of the attachments or the accuracy of the transcriptions.  To do so, we would need both more time and access to the original notes, particularly given that U.S. Attorney Jensen’s team has already been caught altering Pete’s notes in two instances.  However, we do want to call your attention to the fact that Exhibit 198-11 is mislabeled, and that these notes are not the notes of Pete “and another agent” taken during the Flynn interview.

Additionally, we want to register our objection to AUSA Ken Kohl’s material misstatements to Judge Sullivan during the September 29, 2020, 2020, telephonic hearing, during which Mr. Kohl inaccurately represented that Pete viewed himself as an “insurance policy” against President Trump’s election.

So basically both of them refused to affirm that the notes were authentic. But she made the claim anyway.