Posts

“Shut up and explain how we could assist the FPs in finding *MORE* detainees”

Atrios points out the hypocrisy of our foreign policy as displayed in his Twitter stream.

It reminded me of this:

(02:26:01 PM) Manning: i dont believe in good guys versus bad guys anymore… i only a plethora of states acting in self interest… with varying ethics and moral standards of course, but self-interest nonetheless

(02:26:18 PM) Manning: s/only/only see/

(02:26:47 PM) Lamo: the tm meant i was being facetious

(02:26:59 PM) Manning: gotchya

(02:27:47 PM) Manning: i mean, we’re better in some respects… we’re much more subtle… use a lot more words and legal techniques to legitimize everything

(02:28:00 PM) Manning: its better than disappearing in the middle of the night

(02:28:19 PM) Manning: but just because something is more subtle, doesn’t make it right

(02:29:04 PM) Manning: i guess im too idealistic

(02:31:02 PM) Manning: i think the thing that got me the most… that made me rethink the world more than anything

(02:35:46 PM) Manning: was watching 15 detainees taken by the Iraqi Federal Police… for printing “anti-Iraqi literature”… the iraqi federal police wouldn’t cooperate with US forces, so i was instructed to investigate the matter, find out who the “bad guys” were, and how significant this was for the FPs… it turned out, they had printed a scholarly critique against PM Maliki… i had an interpreter read it for me… and when i found out that it was a benign political critique titled “Where did the money go?” and following the corruption trail within the PM’s cabinet… i immediately took that information and *ran* to the officer to explain what was going on… he didn’t want to hear any of it… he told me to shut up and explain how we could assist the FPs in finding *MORE* detainees

(02:35:46 PM) Lamo : I’m not here right now

(02:36:27 PM) Manning: everything started slipping after that… i saw things differently

(02:37:37 PM) Manning: i had always questioned the things worked, and investigated to find the truth… but that was a point where i was a *part* of something… i was actively involved in something that i was completely against… [my emphasis]

All the pop psychology that has been offered to explain why Bradley Manning allegedly leaked to WikiLeaks serves to obscure his own very clear explanation: Manning first “saw things differently” when he was ordered to help our client thug in Iraq crack down on very tame domestic dissent.

While I think the Administration has been not-horrible in its response to the upheaval in the Middle East, it still is mostly just “words and legal techniques to legitimize” American self interest.

Chet Uber Contacted HBGary before He Publicized His Role in Turning in Bradley Manning

A reader found a very interesting email among the HBGary emails: Chet Uber emailed–after having tried to call–HBGary CEO Greg Hoglund on June 23, 2010.

> Sir,

>

>

>

> I would like to speak to Mr. Hoglund. My name is Chet Uber

> and I was given his name by common associates as someone I should speak with.

> The nature of our work is highly sensitive so no offense but I cannot explain

> the details of my call. I was given a URL and a phone number. I was not given

> his direct line and every time I try to get an attendant you phone system

> disconnects me. Would you please forward him this email to him. The links below

> are new and as much information as we have ever made public.

>

>

>

> Sorry for the mystery but in my world we are careful about

> our actions and this is something interpreted as rudeness. I am being polite,

> so any cooperation you can provide is greatly appreciated.

Uber copies himself, Mark Rasch, George Johnson, and Mike Tomasiewicz, and sends links to two stories about Project Vigilant, which had been posted on the two proceeding days.

In response to the email, Hoglund asks Bob Slapnick to check Uber out with someone at DOD’s CyberCrime Center.

Chet Uber, as you’ll recall, is the guy who held a press conference at DefCon on August 1 to boast about his role in helping Adrian Lamo turn Bradley Manning in to authorities. Mark Rasch is the former DOJ cybercrimes prosecutor who claims to be Project Vigilant’s General Counsel and who says he made key connections with the government on Manning.

Mind you, the multiple versions of Uber’s story of his involvement in turning in Manning are inconsistent. At least a couple versions have Lamo calling Uber in June, after Manning had already been arrested.

So there are plenty of reasons to doubt the Lamo and Uber story. And security insiders have suggested the whole Project Vigilant story may be nothing more than a publicity stunt.

Furthermore, this email may be more of the same. Uber may have been doing no more than cold-calling Hoglund just as he was making a big publicity push capitalizing on the Manning arrest.

But consider this.

Lamo’s conversations with Manning have always looked more like the coached questions of someone trying to elicit already-suspected details than the mutual boasting of two hackers. Because of that and because of the inconsistencies and flimsiness of the Project Vigilant story, PV all looked more like a cover story for why Lamo would narc out Bradley Manning than an accurate story. And Uber’s email here and his DefCon press conference may well be publicity stunts. But then, that’s what Aaron Barr’s research on Anonymous was supposed to be: a widely publicized talk designed to bring new business. But a key part of the PV story was the claim that Adrian Lamo had volunteered with the group working on “adversary characterization.”

Uber says Lamo worked as a volunteer research associate for Project Vigilant for about a year on something called adversary characterization, which involved gathering information for a project on devising ways to attribute computer intrusions to individuals or groups. He helped define the roles, tools and methods intruders would use to conduct such attacks.

While it is described as more technical, that’s not all that different from what Aaron Barr was doing with social media on Anonymous.

One more thing. Consider what DOJ has been doing since the time Lamo turned in Manning and now: asking social media providers for detailed information about a network of people associated with Wikileaks. That is, DOJ appears to have been doing with additional legal tools precisely what Barr was doing with public sources.

That’s likely all a big coinkydink. But these security hackers all seem to love turning their freelance investigations into big publicity stunts.

The Government’s Amended Twitter Order

After successfully petitioning the court to unseal them, EFF has posted the motion to vacate, motion to unseal court records, and motion to unseal motions it filed in the government’s effort to get Twitter information on several people in its investigation of WikiLeaks. The first motion to unseal has a detail I didn’t know before: Twitter appears to have objected to the government’s first request as being too burdensome to provide, so it trimmed its request.

As reflected in the published order, the government originally requested a bunch of Twitter data relating to Wikileaks, Julian Assange, Bradley Manning, Jacob Appelbaum, Birgitta Jónsdóttir, Rop Gonggrijp, and Jacob Appelbaum, covering the period from November 1, 2009 though the request.

But then–presumably after December 14–the government agreed to narrow the request (the four “people” in this passage are Wikileaks, Appelbaum, Jónsdóttir, and Gonggrijp):

As a result of negotiations between Twitter and the government, to reduce the burden on Twitter and to recognize that Twitter does not have certain of the requested information, Movants understand that the government is presently restricting the time period of its request to November 15, 2009-June 1, 2010, and that the scope of the information sought has been limited to contact information for the four account holders, the addresses used each time Movants logged into their accounts, and information regarding DMs between the four Twitter accounts named in the Order.

The time limitation is not all that surprising: the government alleges that Manning’s illegal activities began on November 19. And they arrested him on May 29.

It’s the other limitations I find interesting: the government is content to get information on the whereabouts (IP Address) of each of the four each time they used Twitter during the period when Manning is alleged to have been leaking to Wikileaks. And, the government is asking to know the timing of each DM the four sent amongst themselves in that period.

Now, presumably the other social media companies the government requested similar information from have since turned it over. In other words, the government may well be happy to limit their request based on what it has already learned from companies less willing to protect their customers’ privacy than Twitter.

Nevertheless, at least from Twitter, they seem to be tracking just this small groups activities in intense form.

DOD Press Office Scrambling to Explain Bradley Manning’s Treatment

Something is badly amiss in DOD’s efforts to tell its side of how it is treating Bradley Manning.

It started on Monday when NBC’s Chief Pentagon correspondent Jim Miklaszewski (that is, not a hippie) published an article with two big scoops. First, that investigators have been unable to tie Manning directly to Julian Assange.

U.S. military officials tell NBC News that investigators have been unable to make any direct connection between a jailed army private suspected with leaking secret documents and Julian Assange, founder of the whistleblowing website WikiLeaks.

The officials say that while investigators have determined that Manning had allegedly unlawfully downloaded tens of thousands of documents onto his own computer and passed them to an unauthorized person, there is apparently no evidence he passed the files directly to Assange, or had any direct contact with the controversial WikiLeaks figure.

In the same article, Miklaszewski reports what appears to be limited hangout push-back against allegations that Manning was “tortured” (but not “abused”). While Manning was not tortured, Miklaszewski’s sources say, he was improperly put on suicide watch for two days last week.

On Monday, U.S. military officials also strongly denied allegations that Manning, being held in connection with the WikiLeaks’ release of classified documents, has been “tortured” and held in “solitary confinement” without due process.The officials told NBC News, however, that a U.S. Marine commander did violate procedure when he placed Manning on “suicide watch” last week.

Military officials said Brig Commander James Averhart did not have the authority to place Manning on suicide watch for two days last week, and that only medical personnel are allowed to make that call.

Note that both of these scoops were attributed to “US military officials,” though a later reference refers to “official,” singular. Later in the article, he cites, “U.S. Marine and Army officials” stating that Manning “is being treated like any other maximum security prisoner.” If I had to guess, I’d say Miklaszewski was protecting whatever officials gave him the scoop, while more clearly identifying those who pushed back on it.

The following day, CNN’s Chris Lawrence wrote a piece reporting that Brig Commander Averhart was being investigated.

The U.S. military is investigating why the commander of the military jail put Pfc. Bradley Manning, suspected of leaking documents to WikiLeaks, on suicide watch for a few days last week, according to Pentagon spokesman Col. David Lapan.

[snip]

An investigation has been launched into whether Brig Commander James Averhart had the authority to place Manning on suicide watch, which is usually ordered by the medical staff.

That report was sourced to David Lapan, by name. Within three hours after that story appeared, CNN pulled the story, first explaining,

The CNN Wire has killed the story slugged US-WikiLeaks-Manning-1 that moved at 2:47 p.m. due to new information. The military spokesman identified in the story says there is no investigation into the decision to put Bradley Manning on suicide watch.

That retraction now names Lapan, again by name. Lawrence was among the first to report, the following day, that Averhart (who a day before was maybe or maybe not under investigation) was being replaced–pursuant to a decision made back in October.

But the really interesting thing came before that, in yesterday’s press briefing by David Lapan’s boss, Pentagon Press Secretary Geoff Morrell (whose resemblance to the Matrix’ Agent Smith is uncanny, and who notes this was his first press briefing since November; here’s a video of the presser). Read more

Did Manning Zerofill His Computers? Or Did the Military?

Wired has a post on MSNBC’s report that “there is apparently no evidence he passed the files directly to [Julian] Assange, or had any direct contact with the controversial WikiLeaks figure.” In it, Kim Zetter looks to the chat logs to try to explain why there is no such evidence.

If it’s true that investigators have found no evidence linking Manning and Assange, it may be because Manning allegedly erased it from his system. He discussed doing so in his chats with Lamo. Manning noted in the chats that any incriminating evidence of his activities had been “zerofilled”, or erased, from his computers:

But that’s not precisely what the passage she quotes says. Note, because I’ve used a different selection of chat log than Zetter, I have bolded the part she included in her selection (though she includes in her post).

(02:13:51 AM) Lamo: Why does your job afford you access?

(02:13:59 AM) Lamo: except for the UN.

(02:14:03 AM) Manning: because i have a workstation

(02:14:15 AM) Lamo: and World Bank.

(02:14:17 AM) Manning: *had*

(02:14:36 AM) Lamo: So you have these stored now?

(02:14:54 AM) Manning: i had two computers… one connected to SIPRNET the other to JWICS…

(02:15:07 AM) Manning: no, they’re government laptops

(02:15:18 AM) Manning: they’ve been zerofilled

(02:15:22 AM) Manning: because of the pullout

(02:15:57 AM) Manning: evidence was destroyed… by the system itself

(02:16:10 AM) Lamo: So how would you deploy the cables? If at all.

(02:16:26 AM) Manning: oh no… cables are reports

(02:16:34 AM) Lamo: ah

(02:16:38 AM) Manning: State Department Cable = a Memorandum

(02:16:48 AM) Lamo: embassy cables?

(02:16:54 AM) Manning: yes

(02:17:00 AM) Manning: 260,000 in all

(02:17:10 AM) Manning: i mentioned this previously

(02:17:14 AM) Lamo: yes

(02:17:31 AM) Lamo: stored locally, or retreiveable?

(02:17:35 AM) Manning: brb latrine =P

(02:17:43 AM) Manning: i dont have a copy anymore

(02:17:59 AM) Lamo: *nod*

(02:18:09 AM) Manning: they were stored on a centralized server…

(02:18:34 AM) Lamo: what’s your endgame plan, then?

(02:18:36 AM) Manning: it was vulnerable as fuck

As Zetter correctly notes, in this passage Manning suggests files had been zerofilled. But in this passage, he doesn’t say he did it.

Now, in a separate section, Manning says he zerofilled the original of the Rejkjavik 13 cable.

(1:48:50 PM) Lamo: give me some bona fides … yanno? any specifics.

(1:49:40 PM) Manning: this one was a test: Classified cable from US Embassy Reykjavik on Icesave dated 13 Jan 2010

(1:50:30 PM) Manning: the result of that one was that the icelandic ambassador to the US was recalled, and fired

(1:51:02 PM) Manning: thats just one cable…

(1:51:14 PM) Lamo: Anything unreleased?

(1:51:25 PM) Manning: i’d have to ask assange

(1:51:53 PM) Manning: i zerofilled the original

(1:51:54 PM) Lamo: why do you answer to him?

(1:52:29 PM) Manning: i dont… i just want the material out there… i dont want to be a part of it [my emphasis]

Contextually, this might suggest that both mentions of zerofilling refer to the same–all 250,000 cables–since they both come in response to Lamo’s probing questions about the cables. Indeed, Manning’s reference to zerofilling himself, in the context of the Rejkjavik cable, may explain why he no longer has access to any cables he could give Lamo to prove his bona fides. But even if both references both mean to include all the cables, it would remain ambiguous whether Manning zerofilled his computer or someone else did.

Read more

CNN: Military Investigating Why Brig Commander Put Bradley Manning on Suicide Watch [Update: Or Maybe Not]

CNN elaborates on something MSNBC reported last night. Not only did Quantico Brig Commander James Averhart improperly put Bradley Manning on suicide watch for two days last week, but the military is now investigating why he did so.

The U.S. military is investigating why the commander of the military jail put Pfc. Bradley Manning, suspected of leaking documents to WikiLeaks, on suicide watch for a few days last week, according to Pentagon spokesman Col. David Lapan.

[snip]

An investigation has been launched into whether Brig Commander James Averhart had the authority to place Manning on suicide watch, which is usually ordered by the medical staff.

Now, as MSNBC explained last night, the suicide watch came because Manning allegedly disobeyed the order of two guards, so it’s not entirely clear what CNN means by “why.”

But this is a really welcome development. I hope the investigation is as transparent as the reports to MSNBC and CNN have been in the last day.

Update: Now CNN has retracted this story, with the following notice.

The CNN Wire has killed the story slugged US-WikiLeaks-Manning-1 that moved at 2:47 p.m. due to new information. The military spokesman identified in the story says there is no investigation into the decision to put Bradley Manning on suicide watch.

I’ve put a screen cap of the original story up top.

Government Admits Brig Commander Improperly Put Bradley Manning on Suicide Watch

Quantico entrance. (photo: crowdive on Flickr)

The government has admitted to MSNBC that the Brig Commander at Quantico improperly put Bradley Manning on suicide watch last week.

The officials told NBC News, however, that a U.S. Marine commander did violate procedure when he placed Manning on “suicide watch” last week.

Military officials said Brig Commander James Averhart did not have the authority to place Manning on suicide watch for two days last week, and that only medical personnel are allowed to make that call.

The official said that after Manning had allegedly failed to follow orders from his Marine guards. Averhart declared Manning a “suicide risk.” Manning was then placed on suicide watch, which meant he was confined to his cell, stripped of most of his clothing and deprived of his reading glasses — anything that Manning could use to harm himself. At the urging of U.S. Army lawyers, Averhart lifted the suicide watch.

So Manning allegedly fails to follow an order and the Brig Commander decides he loses his glasses and is stripped of his clothing?

Remember, Manning has not been convicted of anything yet.

The rest of the article describes that the government has been unable to link Manning to Julian Assange. Maybe that’s why they took his glasses away.

Update: This certainly puts the events from Quantico yesterday in a different light. According to MSNBC, government lawyers realized last week Manning had been improperly treated. By preventing David House from visiting Manning yesterday, they made sure that he wouldn’t have confirmation of that from Manning directly. But since Jane and David’s comments said they’d be back next week, DOD realized they’d need to ‘fess up themselves.

American Democracy, Tunisia, and Wikileaks

Update: BBC and al-Jazeera report that Ben Ali has left the country and security forces have arrested family members at the airport.

The simultaneous (and related) unfolding of the uprising in Tunisia and the latest Wikileaks events reveals a great deal about our own country’s support for democracy.

If you aren’t already, I recommend you follow @abuaardvark (aka Mark Lynch) so long as this crisis in Tunisia lasts. Not only is Lynch following the up-to-the-minute events closely on Twitter–such as the news that dictator Zine el Abidine Ben Ali just sacked his government and will hold elections six months from now. But he also has chronicled the strange silence about this popular uprising in the US, particularly among the NeoCons who used democracy promotion as their excuse to launch an illegal war in Iraq.

Barely a month goes by without a Washington Post editorial bemoaning Egypt’s authoritarian retrenchment and criticizing the Obama administration’s alleged failure to promote Arab democracy. But now Tunisia has erupted as the story of the year for Arab reformers. The spiraling protests and the regime’s heavy-handed, but thus far ineffective, repression have captured the imagination of Arab publics, governments, and political analysts. Despite Tunis’s efforts to censor media coverage, images and video have made it out onto social media and up to Al Jazeera and other satellite TV. The “Tunisia scenario” is now the term of art for activist hopes and government fears of political instability and mass protests from Jordan to Egypt to the Gulf.

[snip]

Perhaps they’ve had nothing to say simply because there has been little coverage of Tunisia in the Western media, and the United States has few interests or leverage in Tunis, making it a marginal issue for U.S. political debate. Tunisia is not generally on the front burner in American thinking about the Middle East. It’s far away from Israel, Iraq, and the Gulf, and plays little role in the headline strategic issues facing the U.S. in the region. Despite being one of the most repressive and authoritarian regimes in the region, Tunisia has generally been seen as a model of economic development and secularism. Its promotion of women’s rights and crushing of Islamist opposition has taken priority in the West over its near-complete censorship of the media and blanket domination of political society. Indeed, the United States has cared so little about Tunisia’s absolute rejection of democracy and world-class censorship that it chose it for the regional office of MEPI, the Bush administration’s signature democracy promotion initiative.

This is understandable, but hardly satisfying. I can understand the hesitation of U.S. officials to take a strong position on the side of either the protesters or the regime at this point, given the strategic complexities and the implications of taking any rhetorical stance. To my ears, at least, the U.S. message has been muddled, with some officials seeming to take the side of the protesters and warning against too-harsh repression and others seeming to avoid taking a stance. For what it’s worth, I told a State Department official in a public forum yesterday that the absence of major U.S. interests in Tunisia and the real prospect of change there make it a good place for the Obama administration to take a principled stand in favor of public freedoms and against repression.

Click through for his update–a response to a WaPo column regarding such populist uprising as a threat.

With Lynch’s comments in mind, consider two different versions of the role of Wikileaks in this uprising.

Elizabeth Dickinson has a piece that–perhaps too strongly–calls Wikileaks “a trigger and a tool for political outcry” in Tunisia.

Tunisia’s government doesn’t exactly get a flattering portrayal in the leaked State Department cables. The country’s ruling family is described as “The Family” — a mafia-esque elite who have their hands in every cookie jar in the entire economy. “President Ben Ali is aging, his regime is sclerotic and there is no clear successor,” a June 2009 cable reads. And to this kleptocracy there is no recourse; one June 2008 cable claims: “persistent rumors of corruption, coupled with rising inflation and continued unemployment, have helped to fuel frustration with the GOT [government of Tunisia] and have contributed to recent protests in southwestern Tunisia. With those at the top believed to be the worst offenders, and likely to remain in power, there are no checks in the system.”

Of course, Tunisians didn’t need anyone to tell them this. But the details noted in the cables — for example, the fact that the first lady may have made massive profits off a private school — stirred things up. Matters got worse, not better (as surely the government hoped), when WikiLeaks was blocked by the authorities and started seeking out dissidents and activists on social networking sites.

As PayPal and Amazon learned last year, WikiLeaks’ supporters don’t take kindly to being denied access to the Internet. And the hacking network Anonymous launched an operation, OpTunisia, against government sites “as long as the Tunisian government keep acting the way they do,” an Anonymous member told the Financial Times.

Compare that the very weird logic State Department Spokesperson Philip Crowley uses in his speech to a class on media and politics the other day.

No one is a greater advocate for a vibrant independent and responsible press, committed to the promotion of freedom of expression and development of a true global civil society, than the United States. Every day, we express concern about the plight of journalists (or bloggers) around the world who are intimidated, jailed or even killed by governments that are afraid of their people, and afraid of the empowerment that comes with the free flow of information within a civil society.

Most recently, we did so in the context of Tunisia, which has hacked social media accounts while claiming to protect their citizens from the incitement of violence. But in doing so, we feel the government is unduly restricting the ability of its people to peacefully assemble and express their views in order to influence government policies. These are universal principles that we continue to support.  And we practice what we preach. Just look at our own country and cable television. We don’t silence dissidents. We make them television news analysts.

Some in the human rights community in this country, and around the world, are questioning our commitment to freedom of expression, freedom of the press and Internet freedom in the aftermath of WikiLeaks.  I am constrained in what I can say, both because individual cables remain classified, and the leak is under investigation by the Department of Justice. But let me briefly put this in context and then I will open things up for questions.  WikiLeaks is about the unauthorized disclosure of classified information. It is not an exercise in Internet freedom. It is about the legitimate investigation of a crime. It is about the need to continue to protect sensitive information while enabling the free flow of public information. [my emphasis]

He sort of wanders back and forth between a discussion of press freedom and an insistence that persecution of Wikileaks is not a violation of that principle through the rest of his speech, at one point drawing a bizarre analogy between Coke’s secret formula and Google’s search algorithms and the US’ diplomatic secrets, as if our diplomatic secrets are the essence of our identity.

Maybe that was his point.

I find Crowley’s statement in the quoted passage interesting for several reasons. Read more

Why Did Bradley Manning Allegedly Leak WikiLeaks Two Things before He Verified Assange’s Identity?

To return to the work I was doing yesterday, there’s something odd about the timeline of Bradley Manning’s alleged leaks to WikiLeaks: he appears to give WikiLeaks at least two things–the Rejkjavik 13 cable and the Collateral Murder video–before he verified Julian Assange’s identity.

In the chat logs, Manning explains he first started working with WikiLeaks after they released the 9/11 pager messages.

(12:46:17 PM) Adrian: how long have you helped WikiLeaks?

(12:49:09 PM) bradass87: since they released the 9/11 “pager messages”

(12:49:38 PM) bradass87: i immediately recognized that they were from an NSA database, and i felt comfortable enough to come forward

(12:50:20 PM) bradass87: so… right after thanksgiving timeframe of 2009

That would date it November 24 or 25. Interestingly, the government says Manning’s alleged activities began somewhat earlier, November 19. That may suggest they have reason to believe he may have first accessed materials he was not authorized to access on November 19.

There’s a curious break in the chat logs (where Lamo makes his first efforts to get Manning to talk about operation security, while Manning loses it), after which Manning seems to correct Lamo’s suggestion that he’s a WL volunteer. But that does lead Manning to discuss communicating directly with Assange.

(2:04:29 PM) Manning: im a source, not quite a volunteer

(2:05:38 PM) Manning: i mean, im a high profile source… and i’ve developed a relationship with assange… but i dont know much more than what he tells me, which is very little

(2:05:58 PM) Manning: it took me four months to confirm that the person i was communicating was in fact assange

(2:10:01 PM) Lamo: how’d you do that?

(2:12:45 PM) Manning: I gathered more info when i questioned him whenever he was being tailed in Sweden by State Department officials… i was trying to figure out who was following him… and why… and he was telling me stories of other times he’s been followed… and they matched up with the ones he’s said publicly

(2:14:28 PM) Lamo: did that bear out? the surveillance?

(2:14:46 PM) Manning: based on the description he gave me, I assessed it was the Northern Europe Diplomatic Security Team… trying to figure out how he got the Reykjavik cable…

(2:15:57 PM) Manning: they also caught wind that he had a video… of the Gharani airstrike in afghanistan, which he has, but hasn’t decrypted yet… the production team was actually working on the Baghdad strike though, which was never really encrypted

As I suggested yesterday, that would mean that Manning had not verified Assange’s identity until roughly March 24. That would coincide exactly with the Wikileak Twitter account’s discussion of US and Icelandic surveillance. Of potential note, on March 23, WL said, “We know our possession of the decrypted airstrike video is now being discussed at the highest levels of US command,” which might be information Manning had access to. While not definitive, all of that suggests the public discussion was one way Manning verified “that the person i was communicating was in fact assange.”

But there were at least two things Manning had already allegedly leaked to WikiLeaks: the Collateral Murder video and the Rejkjavik 13 cable. A possible third which I will not deal with here is the intelligence report naming WikiLeaks as a threat to the military, which was released March 18, 2010, but which is not definitely attributable even hypothetically to Manning.

Collateral Murder Timing

WL first reported getting what appear to be the Collateral Murder and Gharani videos on January 8, 2010.

Have encrypted videos of US bomb strikes on civilians http://bit.ly/wlafghan2 we need super computer time http://ljsf.org/

On February 20, it claimed to have cracked the encryption code of what appears to be the Collateral Murder video.

Finally cracked the encryption to US military video in which journalists, among others, are shot. Thanks to all who donated $/CPUs.

For his part, Manning describes just stumbling upon the Collateral Murder video, did some research into what it was, then stewed on it for a month and a half before forwarding to WL.

(03:07:53 PM) Manning: i watched that video cold, for instance

(03:10:32 PM) Manning: at first glance… it was just a bunch of guys getting shot up by a helicopter… no big deal… about two dozen more where that came from right… but something struck me as odd with the van thing… and also the fact it was being stored in a JAG officer’s directory… so i looked into it… eventually tracked down the date, and then the exact GPS co-ord… and i was like… ok, so thats what happened… cool… then i went to the regular internet… and it was still on my mind… so i typed into goog… the date, and the location… and then i see this http://www.nytimes.com/2007/07/13/world/middleeast/13iraq.html

(03:11:07 PM) Manning: i kept that in my mind for weeks… probably a month and a half… before i forwarded it to [WikiLeaks]

He dates uploading the video sometime in February.

(02:47:07 PM) Manning: the CM video came from a server in our domain! and not a single person noticed

(02:47:21 PM) Lamo: CM?

(02:48:17 PM) Manning: Apache Weapons Team video of 12 JUL 07 airstrike on Reuters Journos… some sketchy but fairly normal street-folk… and civilians

(02:48:52 PM) Lamo: How long between the leak and the publication?

(02:49:18 PM) Manning: some time in february

(02:49:25 PM) Manning: it was uploaded

(02:50:04 PM) Lamo: uploaded where? how would i transmit something if i had similarly damning data

(02:51:49 PM) Manning: uhm… preferably openssl the file with aes-256… then use sftp at prearranged drop ip addresses

(02:52:08 PM) Manning: keeping the key separate… and uploading via a different means

(02:52:31 PM) Lamo: so i myself would be SOL w/o a way to prearrange

(02:54:33 PM) Manning: not necessarily… the HTTPS submission should suffice legally… though i’d use tor on top of it…

Now, those are seemingly contradictory sets of dates: WL boasts it has Gharani, at least, in January, though the February reference to decrypting it seems to mean Collateral Murder was included in the January announcement. But note that if Manning had first accessed the Collateral Murder video on November 19, a month and a half might put it close to the New Year.

In any case, however, both WL and Manning seem to agree the video was in hand by February, a month before (assuming Manning’s description of the verification process is accurate) Manning verified Assange’s identity. Read more

What the Government Might Be After with Its Twitter Subpoena

After a member of Iceland’s Parliament and former Wikileaks volunteer, Birgitta Jónsdóttir, revealed on Twitter yesterday that Twitter has been subpoenaed for details on her Twitter account, Glenn got a copy of the subpoena. The subpoena was first submitted to Twitter on December 14, and asked for account information for six people as well as any account associated with Wikileaks, going back to November 1, 2009. Of particular note, they ask for:

records of user activity for any connections made to or from the Account, including the date, time, length, and method of connections, data transfer volume, user name, and source and destination Internet Protocol address(es).

non-content information associated with the contents of any communication or file stored by or for the account(s), such as the source and destination email addresses and IP addresses.

By getting the IP addresses, they might be able to tie a location to the Wikileaks activity (though I would imagine some of the subpoenaed people shield that kind of information).

Here’s what they might be after.

There’s a passage in the chat logs in which Manning describes how he confirmed he was communicating directly with Julian Assange. This passage comes on May 22, allegedly before Adrian Lamo was cooperating with investigators (but there are reasons to question that).

(2:05:58 PM) Manning: it took me four months to confirm that the person i was communicating was in fact assange

(2:10:01 PM) Lamo: how’d you do that?

(2:12:45 PM) Manning: I gathered more info when i questioned him whenever he was being tailed in Sweden by State Department officials… i was trying to figure out who was following him… and why… and he was telling me stories of other times he’s been followed… and they matched up with the ones he’s said publicly

(2:14:28 PM) Lamo: did that bear out? the surveillance?

(2:14:46 PM) Manning: based on the description he gave me, I assessed it was the Northern Europe Diplomatic Security Team… trying to figure out how he got the Reykjavik cable…

While Manning doesn’t say that these conversations took place on Twitter (I’ll come back to this), we know that Wikileaks, at least, was revealing details of the government’s surveillance of it on Twitter. A series of Tweets from late March describe heavy State Department surveillance. Several of the tweets reference the production of the Collateral Murder video. Now mind you, this was a month or more after Manning would have leaked the video itself. But this tweet makes me wonder whether Manning didn’t continue monitoring surveillance and response.

We know our possession of the decrypted airstrike video is now being discussed at the highest levels of US command.

In other words, this may be evidence on Twitter of the Wikileaks team learning information that Manning might have provided them.

As Glenn points out, three of the people covered by the subpoena were involved in the production of the video.

the three named producers of the “Collateral Murder” video — depicting and commenting on the U.S. Apache helicopter attack on journalists and civilians in Baghdad — were Assange, Jónsdóttir, and Gonggrijp (whose name is misspelled in the DOJ’s documents).  Since Gonggrijp has had no connection to WikiLeaks for several months and Jónsdóttir’s association has diminished substantially over time, it seems clear that they were selected due to their involvement in the release of that film.

One of the things the government may be trying to do is to pinpoint what IP was involved in the tweets revealing the surveillance, to try to tie any conversation about that surveillance to conversations with Manning, and in turn tie those conversations to their theory that the Wikileaks team conspired to leak this information.

Manning says he tracked this kind of surveillance to confirm that he was contacting Assange directly. The government may be trying to retrace his tracks in confirming Assange’s identity, too.

[This post was updated after it was first posted.]