John Yoo Archives - Page 2 of 22

Posts

The Yahoo Scans Closely Followed Obama’s Cybersecurity Emergency Declaration

October 4, 2016/3 Comments/in EO 12333, FISA /by emptywheel

Reuters has a huge scoop revealing that, in spring of 2015, Yahoo was asked and agreed to perform scans for certain selectors on all the incoming email to its users.

The company complied with a classified U.S. government directive, scanning hundreds of millions of Yahoo Mail accounts at the behest of the National Security Agency or FBI, said two former employees and a third person apprised of the events.

[snip]

It is not known what information intelligence officials were looking for, only that they wanted Yahoo to search for a set of characters. That could mean a phrase in an email or an attachment, said the sources, who did not want to be identified.

The timing of this is particularly interesting. We know that it happened sometime in the weeks leading up to May 2015, because after Alex Stamos’ security team found the code enabling the scan, he quit and moved to Facebook.

According to the two former employees, Yahoo Chief Executive Marissa Mayer’s decision to obey the directive roiled some senior executives and led to the June 2015 departure of Chief Information Security Officer Alex Stamos, who now holds the top security job at Facebook Inc.

[snip]

The sources said the program was discovered by Yahoo’s security team in May 2015, within weeks of its installation. The security team initially thought hackers had broken in.

When Stamos found out that Mayer had authorized the program, he resigned as chief information security officer and told his subordinates that he had been left out of a decision that hurt users’ security, the sources said. Due to a programming flaw, he told them hackers could have accessed the stored emails.

That would date the directive to sometime around the time, on April 1, 2015, that Obama issued an Executive Order declaring cyberattacks launched by persons located outside the US a national emergency.

I, BARACK OBAMA, President of the United States of America,find that the increasing prevalence and severity of malicious cyber-enabled activities originating from, or directed by persons located, in whole or in substantial part, outside theUnited States constitute an unusual and extraordinary threat to the national security, foreign policy, and economy of theUnited States. I hereby declare a national emergency to deal with this threat.

On paper, this shouldn’t create any authority to expand surveillance. Except that we know FISC did permit President Bush to expand surveillance — by eliminating the wall between intelligence and criminal investigations — after he issued his September 14, 2001 9/11 emergency declaration, before Congress authorized that expansion. And we know that Jack Goldsmith focused on that same emergency declaration in his May 2004 OLC opinion reauthorizing Stellar Wind.

Indeed, just days after Obama issued that April 2015 EO, I wrote this:

Ranking House Intelligence Member Adam Schiff’s comment that Obama’s EO is “a necessary part of responding to the proliferation of dangerous and economically devastating cyber attacks facing the United States,” but that it will be “coupled with cyber legislation moving forward in both houses of Congress” only adds to my alarm (particularly given Schiff’s parallel interest in giving Obama soft cover for his ISIL AUMF while having Congress still involved). It sets up the same structure we saw with Stellar Wind, where the President declares an Emergency and only a month or so later gets sanction for and legislative authorization for actions taken in the name of that emergency.

And we know FISC has been amenable to that formula in the past.

We don’t know that the President has just rolled out a massive new surveillance program in the name of a cybersecurity Emergency (rooted in a hack of a serially negligent subsidiary of a foreign company, Sony Pictures, and a server JP Morgan Chase forgot to update).

We just know the Executive has broadly expanded surveillance, in secret, in the past and has never repudiated its authority to do so in the future based on the invocation of an Emergency (I think it likely that pre FISA Amendments Act authorization for the electronic surveillance of weapons proliferators, even including a likely proliferator certification under Protect America Act, similarly relied on Emergency Proclamations tied to all such sanctions).

I’m worried about the Cyber Intelligence Sharing Act, the Senate version of the bill that Schiff is championing. But I’m just as worried about surveillance done by the executive prior to and not bound by such laws.

Because it has happened in the past.

I have reason to believe the use of emergency declarations to authorize surveillance extends beyond the few data points I lay out in this post. Which is why I find it very interesting that the Yahoo request lines up so neatly with Obama’s cyber declaration.

I’m also mindful of Ron Wyden’s repeated concerns about the 2003 John Yoo common commercial services opinion that may be tied to Stellar Wind but that, Wyden has always made clear, has some application for cybersecurity. DOJ has already confirmed that some agencies have relied on that opinion.

In other words, this request may not just be outrageous because it means Yahoo is scanning all of its customers incoming emails. But it may also be (or have been authorized by) some means other than FISA.

What Price Victory?

August 3, 2016/27 Comments/in 2016 Presidential Election /by emptywheel

Virtually the entire political class has now united to defeat Donald Trump, with Morning Joe today staging a Michael Hayden appearance that served largely to allow Scarborough to tell the story of Trump asking three times in a foreign policy briefing why the US couldn’t use its nukes. As Dan Drezner pointed out on Twitter, Scarborough says the event happened months ago — when the primary was still going on — but has just now staged its telling.

Beating Donald Trump is important. He’s a racist who aims to win by promising white working class people they can resume persecuting people of color again, and he is dangerously inconsistent. That said, he does want to spend lots on infrastructure and protect workers from the ravages of globalization, something often forgotten in depictions of him as entirely policy free.

But the transpartisan obsession with beating Trump has largely applauded two developments that, for liberals, for democrats, for those who believe in peace, for progressives, should be a worry.

First, the Neocon establishment has come out in enthusiastic support for Clinton, with ideologue Eliot Cohen orchestrating serial efforts (one that even includes John Yoo!!) to oppose Trump. They point to Trump’s erratic nature and more recently the theories of Putin’s influence. They do so even in the face of a report that Paul Manafort, through whom any Putin influence would be managed, is checking out.

I exchanged messages Tuesday evening with a longtime ally of Trump campaign manager Paul Manafort, whom I asked about who was calling the shots in the campaign. The response indicated that Manafort, a veteran of Republican politics brought in this spring for the transition from primaries to the general election, has lost control over his candidate.

“Manafort not challenging (Trump) anymore,” Manafort’s ally wrote. “Mailing it in. Staff suicidal.”

I’m getting whiplash following the Manchurian Trump stories. Maybe the ones suggesting Bill Clinton was behind the Trump run are the true ones after all.

And even while the focus has been on Russia’s alleged influence with Trump, there has been no focus on Hillary’s unquestioning support of Saudi Arabia (the country that had ties to 9/11) and Israel. Or on Hillary’s equally troubling policy proposals, such as starting a No Fly Zone over Russian planes. As Will Bunch noted in a great column, Democrats have become the party that shuns people who chant No More War.

The delegates didn’t hear from an Andrew Bacevich or the equivalent of James Madison, but they did get Panetta, who — as noted in this excellent analysis — has supported expanded war powers for the White House, failed to push for real accountability on Bush-era torture, and once suggested that “a 30-year war” will be needed against terrorism. Was it really rude for some of the DNC delegates to chant “no more war!” during Panetta’s speech? Or were some citizens desperately trying to be heard with a different point of view, in a nation so eager to squelch any public debate?

It should be a scandal that the United States drops bombs from flying death robots or our obscenely expensive military jets over countries like Libya, swaths of Africa, or Syria based only on a 15-year-old congressional resolution passed after an attack carried out mostly by Saudi Arabians loyal to a terrorist group that barely exists in 2016. But we’re afraid of any frank discussion of that, or the recent admission by the Obama administration that U.S. military actions in nations with which we’re not technically at war have killed 116 innocent civilians. That’s a number that experts find ridiculously low, by the way, and doesn’t as include as many as 85 Syrian civilians who were killed in late July by a U.S. airstrike — a story that was all but ignored in the media. Even if you strongly believe that such collateral damage is necessary to defeat international terrorism, chanting “USA! USA!” to support militarism is both jingoistic and crudely callous toward the dead.

Not only has Hillary gotten the support of the people who brought us into Iraq based on a lie (she told her own little stretchers to get us into Libya), but we’re now drowning out any voice for peace.

Then there’s the parade of heinous billionaires Hillary has rolled out, with Mark Cuban, Mike Bloomberg, and now Meg Whitman. NYT’s coverage of Whitman’s announcement emphasizes that Hillary has been courting Republican billionaires since before she finalized the nomination and that Hillary’s pick of the pro-TPP pro-Wall Street Tim Kaine is what sealed the deal for Whitman.

Whitman, who said she would remain a Republican, brings with her a considerable network of contributors, some of whom she said were open to giving to Mrs. Clinton. She said she was willing to campaign for Mrs. Clinton, said she would do her best to gather checks for her campaign and indicated she would personally give to both Mrs. Clinton and her affiliated “super PACs.” An aide to Ms. Whitman said she would personally give at least an amount in the “mid-six figures” to the Clinton effort.

While Democrats openly appealed at their convention last week to Republicans uneasy with Mr. Trump, Mrs. Clinton and her top supporters have been making a similar cross-party pitch in private since before the Democratic nomination fight even came to its conclusion.

[snip]

She said she had told Mrs. Clinton that she wanted to see the two parties’ conventions and assess the running mates that each nominee chose before making her decision. When Mrs. Clinton selected Senator Tim Kaine of Virginia, a consensus-oriented figure, “that was a positive for me,” Ms. Whitman said.

Whitman’s nod to Kaine is of particular concern to me, as Democrats downplayed his anti-choice and pro-business policies, at least in public, until after the convention. Now, if anything happens to Hillary (who has some dangerously unhinged enemies), we’ll basically have a moderate Republican running the country.

It’s not just that Hillary has secretly been courting oligarchs since before she cemented the nomination. It’s that her post-convention politicking has focused on it, as if the approval of oligarchs is what it will take to win in midwest swing states.

The guy who will likely become Majority Leader is even more aggressively pursuing typical Republican voters (though this view — admittedly filtered through the potentially inaccurate National Review — has some huge logical contradictions, not to mention an odd idea of what it would take for Democrats to continue to win Illinois).

“No guarantees, there never are, but the odds are more like than not that we will take back the Senate,” Sen. Chuck Schumer said at a forum sponsored by the Washington Post Thursday afternoon. Schumer will be the next majority or minority leader of the Senate Democrats, depending upon how November unfolds. He suggested that the electorate’s sense of economic gloom was actually working to his party’s advantage: “The electorate is moving in a more Democratic direction. When middle class incomes decline, people tend to move in a more progressive direction.”

Schumer’s optimism is driven more by national demographics than by the specific traits of his candidates. He contends that Millennials, or voters aged 18 to 35, will be the largest age group voting in this year’s electorate, even if they don’t turn out in massive numbers.

“The number one factor in whether we retake the Senate is whether Hillary Clinton does well, and I think she’s going to do really well,” Schumer says of his former fellow New York senator. He notes that Senate Majority Leader Mitch McConnell urged Senate Republicans in difficult races to localize their elections, rather than get too tied to Trump’s positions and comments and scoffs, “Sorry, Mitch, this is a national election if there ever was one.”

At least publicly, Schumer has no worries about his party’s dwindling fortunes among working-class white voters. “For every blue-collar Democrat we lose in western Pennsylvania, we will pick up two moderate Republicans in the suburbs in Philadelphia, and you can repeat that in Ohio and Illinois and Wisconsin.”

Democrats, it appears, want to become the party of the Republican soccer mom, which may work well with the bellicose warmongering, but which seems to view economic malaise as an opportunity rather than a problem.

So yeah, by all means, let’s beat the orange crazy man.

But let’s also be cognizant of the more politically palatable craziness that gets embraced in the process.

On The Passing of David Margolis, the DOJ Institution

July 13, 2016/21 Comments/in Department of Justice, Law, Pixie Dust, Unitary Executive /by bmaz

David Margolis was a living legend and giant at the Department of Justice. Now he has passed. Just posted is the following from DOJ:

Statements From Attorney General Loretta E. Lynch and Deputy Attorney General Sally Q. Yates on the Passing of Associate Deputy Attorney General David Margolis

Attorney General Loretta E. Lynch and Deputy Attorney General Sally Q. Yates released the following statements today on the passing of Associate Deputy Attorney General David Margolis, senior-most career employee at the Department of Justice.

Statement by Attorney General Lynch:

“David Margolis was a dedicated law enforcement officer and a consummate public servant who served the Department of Justice – and the American people – with unmatched devotion, remarkable skill and evident pride for more than half a century. From his earliest days as a hard-charging young prosecutor with a singular sense of style to his long tenure as one of the department’s senior leaders, David took on our nation’s most pressing issues and navigated our government’s most complex challenges. To generations of Justice Department employees, he was a respected colleague, a trusted advisor and most importantly, a beloved friend. We are heartbroken at his loss and he will be deeply missed. My thoughts and prayers are with David’s family, his friends and all who loved him.”

Statement by Deputy Attorney General Yates:

“David Margolis was the personification of all that is good about the Department of Justice. His dedication to our mission knew no bounds, and his judgment, wisdom and tenacity made him the “go-to” guy for department leaders for over 50 years. David was a good and loyal friend to all of us, and his loss leaves a gaping hole in the department and in our hearts.”

I am sure Mr. Margolis was a kind, personable and decent chap to those who knew and worked with him. I can be sure because there have been many voices I know who have related exactly that. He was undoubtedly a good family man and pillar of his community. None of that is hard to believe, indeed, it is easy to believe.

Sally Yates is spot on when she says Margolis’ “dedication to our [DOJ] mission knew no bounds”. That is not necessarily in a good way though, and Margolis was far from the the “personification of all that is good about the Department of Justice”. Mr. Margolis may have been such internally at the Department, but it is far less than clear he is really all that to the public and citizenry the Department is designed to serve. Indeed there is a pretty long record Mr. Margolis consistently not only frustrated accountability for DOJ malfeasance, but was the hand which guided and ingrained the craven protection of any and all DOJ attorneys for accountability, no matter how deeply they defiled the arc of justice.

This is no small matter. When DOJ Inspectors General go to Congress to decry the fact that there is an internal protection racket within the Department of Justice shielding even the worst wrongs by Department attorneys, as IG Glen Fine did:

Second, the current limitation on the DOJ OIG’s jurisdiction prevents the OIG – which by statute operates independent of the agency – from investigating an entire class of misconduct allegations involving DOJ attorneys’ actions, and instead assigns this responsibility to OPR, which is not statutorily independent and reports directly to the Attorney General and the Deputy Attorney General. In effect, the limitation on the OIG’s jurisdiction creates a conflict of interest and contravenes the rationale for establishing independent Inspectors General throughout the government. It also permits an Attorney General to assign an investigation raising questions about his conduct or the conduct of his senior staff to OPR, an entity reporting to and supervised by the Attorney General and Deputy Attorney General and lacking the insulation and independence guaranteed by the IG Act.

This concern is not merely hypothetical. Recently, the Attorney General directed OPR to investigate aspects of the removal of U.S. Attorneys. In essence, the Attorney General assigned OPR – an entity that does not have statutory independence and reports directly to the Deputy Attorney General and Attorney General – to investigate a matter involving the Attorney General’s and the Deputy Attorney General’s conduct. The IG Act created OIGs to avoid this type of conflict of interest. It created statutorily independent offices to investigate allegations of misconduct throughout the entire agency, including actions of agency leaders. All other federal agencies operate this way, and the DOJ should also.

Third, while the OIG operates transparently, OPR does not. The OIG publicly releases its reports on matters of public interest, with the facts and analysis underlying our conclusions available for review. In contrast, OPR operates in secret. Its reports, even when they examine matters of significant public interest, are not publicly released.

Said fact and heinous lack of accountability for Justice Department attorneys, not just in Washington, but across the country and territories, is largely because of, and jealously ingrained by, David Margolis. What Glen Fine was testifying about is the fact there is no independent regulation and accountability for DOJ attorneys.

They are generally excluded from the Department IG purview of authority, and it is rare, if ever, courts or state bar authorities will formally review DOJ attorneys without going throughout the filter of the OPR – the Office of Professional Responsibility – within the Department. A protection racket designed and jealously guarded for decades by David Margolis. Even when cases were found egregious enough to be referred out of OPR, they went to…..David Margolis.

In fact, attuned people literally called the OPR the “Roach Motel”:

“I used to call it the Roach Motel of the Justice Department,” says Fordham University law professor Bruce A. Green, a former federal prosecutor and ethics committee co-chair for the ABA Criminal Justice Section. “Cases check in, but they don’t check out.”

If you want a solid history of OPR, and the malfeasance it and Margolis have cravenly protected going back well over a decade, please go read “The Roach Motel”, a 2009 article in no less an authority than the American Bar Association Journal. It is a stunning and damning report. It is hard to describe just how much this one man, David Margolis, has frustrated public transparency and accountability into the Justice Department that supposedly works for the citizens of the United States. It is astounding really.

As I wrote back in 2010:

But just as there is an inherent conflict in the DOJ’s use of the fiction of the OPR to police itself, so too does David Margolis have issues giving the distinct appearance of impropriety. Who and what is David Margolis? A definitive look at the man was made by the National Law Journal (subscription required):

“Taking him on is a losing battle,” says the source. “The guy is Yoda. Nobody fucks with the guy.”
….
Margolis cut his teeth as an organized-crime prosecutor, and he often uses mob analogies in talking about his career at the Justice Department. When asked by an incoming attorney general what his job duties entailed, Margolis responded: “I’m the department’s cleaner. I clean up messes.”

The analogy calls to mind the character of Winston Wolfe, played by Harvey Keitel in the 1994 film “Pulp Fiction.” In the movie, Wolfe is called in by mob honchos to dispose of the evidence after two foot soldiers accidentally kill a murder witness in the back of their car.

“The Cleaner” Mr. Margolis considered himself, while fastidiously sanitizing gross malfeasance and misconduct by DOJ attorneys, all the while denying the American public the disinfectant of sunshine and transparency they deserve from their public servants (good discussion by Marcy, also from 2010).

Perhaps no single incident epitomized Margolis’ determination to be the “cleaner” for the Department of Justice and keep their dirt from public scrutiny and accountability than the case of John Yoo (and to similar extent, now lifetime federal judge Jay Bybee). Yoo as you may recall was the enlightened American who formally opinedcrushing innocent children’s testicles would be acceptable conduct for the United States to engage in. Yoo and Bybee, by their gross adoption of torture, literally personally soiled the reputation of the United States as detrimentally as any men in history.

So, what did David Margolis do in response to the heinous legal banality of evil John Yoo and Jay Bybee engendered in our name? Margolis cleaned it up. He sanitized it. Rationalized it. Ratified it. Hid it. To such an extent architects of such heinous war crimes are now lifetime appointed federal judges and tenured professors. Because that is what “The Cleaner” David Margolis did. “Protecting” the DOJ from accountability, at all costs, even from crimes against humanity, was simply the life goal of David Margolis, and he was depressingly successful at it.

So, less than 24 hours in to the passing of The Cleaner, is it too early to engage in this criticism? Clearly other career officials at the DOJ think discussing the pernicious effects of Margolis on accountability and transparency are out of bounds.

I wonder what the late Senator Ted Stevens would say in response to the “too soon” mandate of Steven Bressler? Because thanks to the efforts of The Cleaner Margolis, Stevens died without the public knowing what an unethical and craven, if not downright criminal, witch hunt attorneys in the Department of Justice ran on him. Even after Stevens was long gone from office and dead, there was Margolis “cleaning” it all up to protect his precious Justice Department when even the internal OPR found gross misconduct:

Following the Justice Department’s agreement in 2009 to vacate the convictions it obtained of former Alaska Senator Ted Stevens, it conducted an internal probe into the conduct of its senior lawyers and—surprise!—exonerated them and itself. It then refused to make the report public. However, at the time the conviction was voided, the presiding judge in Stevens’s case, Emmet Sullivan, appropriately wary of the department’s ethics office, appointed a special prosecutor, Henry F. Schuelke, III, an eminent Washington attorney and former prosecutor, to probe the DOJ’s conduct. Late last week, Schuelke’s 525-page report was released, over the loud objections of DOJ lawyers. The report revealed gross misconduct by the prosecutorial team, stretching over the entire course of the case and reaching into the upper echelons of the department. It concluded there had been “systematic concealment of significant exculpatory evidence which would have independently corroborated [Stevens’s] defense.”

Having laid out the above bill of particulars as to David Margolis, I’d like to return to where we started. As I said in the intro, “I am sure Mr. Margolis was a kind, personable and decent chap”. That was not cheap rhetoric, from all I can discern, both from reading accounts and talking to people who knew Mr. Margolis well, he was exactly that. Ellen Nakashima did a fantastic review of Margolis in the Washington Post last year. And, let’s be honest, the man she described is a guy you would love to know, work with and be around. I know I would. David Margolis was a man dedicated. And an incredibly significant man, even if few in the public understood it.

Say what you will, but Mr. Margolis was truly a giant. While I have no issue delineating what appear to be quite pernicious effects of David Margolis’ gargantuan footprint on the lack of accountability of the Department of Justice to the American citizenry, I have some real abiding respect for what, and who, he was as a man. Seriously, read the Nakashima article and tell me David Margolis is not a man you would love to kill some serious beers with by a peaceful lake somewhere.

But David Margolis, both the good and the bad, is gone now. Where will his legacy live? One of our very longtime friends here at Emptywheel, Avattoir, eruditely said just yesterday:

Focus instead on the institution, not the players. The players are just data points, hopefully leading to greater understanding of the institutional realities.

Those words were literally the first I thought of yesterday when I received the phone call David Margolis had passed. They are true and important words that I, and all, need to take heed of more frequently.

David Margolis, it turns out from all appearances and reports, was a complex man. Clearly great, and clearly detrimental, edges to him. So what will his legacy be at the Department of Justice? Will the closing of the Margolis era, and it was truly that, finally bring the institution of the Department into a modern and appropriate light of transparency, accountability and sunshine?

Or will the dirty deeds of David Margolis’ historical ratification and concealment of pervasive and gross misconduct by Department of Justice attorneys become permanently enshrined as a living legacy to the man?

We shall see.

In 2010, DOJ Was Stalling Gang of Four Member Silvestre Reyes Over (Probably) Common Commercial Services Memo

June 29, 2016/1 Comment/in EO 12333, FISA /by emptywheel

As far as the public record shows, Ron Wyden first started complaining about the Common Commercial Service OLC Memo in late 2010, in a letter with Russ Feingold written “over two years” before January 14, 2013. As I’ve written, John Yoo wrote the memo on May 30, 2003, as one of the last things he did before he left the Office of Legal Council. It seems to have something to do with both the Stellar Wind program and cybersecurity, and apparently deals with agreements with private sector partners. At least one agency has operated consistently with the memo (indeed, Ron Wyden’s secret memo submitted to the court probably says the memo was implemented) but the government claims that doesn’t mean that agency relied on the memo and so the ACLU can’t have it in its FOIA lawsuit.

According to a letter liberated by Jason Leopold, however, someone in Congress was raising concerns about a memo — which is probably the same one — even before Wyden and Feingold were. On June 30, 2010, then Chair of the House Intelligence Committee Silvestre Reyes wrote Attorney General Holder a letter about a May 30, 2003 memo. On October 5, Ron Weich wrote Reyes,

We have conferred with Committee staff about your letter and your concerns regarding the potential implications of the opinion. We appreciate your concerns and your recognition of the complexities of the issues involved in our consideration of your request. We will let you know as soon as we are in a position to provide additional information.

In other words, three months after one of the top ranking intelligence overseers in government raised concerns about the memo, DOJ wrote back saying they weren’t yet “in a position to provide additional information.”

That seems like a problem to me.

It also seems to be another data point suggesting that — whatever the government did back in 2003, after Yoo wrote the memo — it was being discussed more generally in 2010, possibly with an eye to implement it.

Update: On reflection, I may have overstated how sure we can be that this May 30 opinion is the same opinion. I’ve adjusted the post accordingly.

DOJ Confirms One or More Agencies Acted Consistent with John Yoo’s Crummy Opinion

May 9, 2016/4 Comments/in Cybersecurity, EO 12333 /by emptywheel

There’s a whiff of panic in DOJ’s response to ACLU’s latest brief in the common commercial services OLC memo, which was submitted last Thursday. They really don’t want to release this memo.

As you recall, this is a memo Ron Wyden has been hinting about forever, stating that it interprets the law other than most people understand it to be. After I wrote about it a bunch of times and pointed out it was apparently closely related to cybersecurity, ACLU finally showed some interest and FOIAed, then sued, for it. In March, DOJ made some silly (but typical) claims about it, including that ACLU had already tried but failed to get the memo as part of their suit for Stellar Wind documents (which got combined with EPIC’s suit for electronic surveillance documents). In response, Ron Wyden wrote a letter to Attorney General Loretta Lynch, noting a lie DOJ made in DOJ’s filings in the case, followed by an amicus brief asking the judge in the case to read the secret appendix to the letter he wrote to Lynch. In it, Wyden complained that DOJ wouldn’t let him read his secret declaration submitted in the case (making it clear they’re being kept secret for strategic reasons more than sources and methods), but asking that the court read his own appendix without saying what was in it.

Which brings us to last week’s response.

DOJ is relying on an opinion the 2nd circuit released last year in ACLU’s Awlaki drone memo case that found that if a significant delay passed between the time an opinion was issued and executive branch officials spoke publicly about it — as passed between the time someone wrote a memo for President Bush’s “close legal advisor” in 2002 about drone killings (potentially of American citizens) and the time Executive branch officials stopped hiding the fact they were planning on drone-killing an American citizen in 2010, then the government can still hide the memo.(I guess we’re not allowed to learn that Kamal Derwish was intentionally, not incidentally, drone-killed in 2002?)

This is, in my understanding, narrower protection for documents withheld under the b5 deliberative privilege exemption than exists in the DC Circuit, especially given that the 2nd circuit forced the government to turn over the Awlaki memos because they had been acknowledged.

In other words, they’re trying to use that 2nd circuit opinion to avoid releasing this memo.

To do that they’re making two key arguments that, in their effort to keep the memo secret, end up revealing a fair amount they’re trying to keep secret. First, they’re arguing (as they did earlier) that the ACLU has already had a shot at getting this memo (in an earlier lawsuit for memos relating to Stellar Wind) and lost.

There’s just one problem with that. As I noted earlier, the ACLU’s suit got joined with EPIC’s, but they asked for different things. ACLU asked for Stellar Wind documents, whereas EPIC asked more broadly for electronic surveillance ones. So when the ACLU argued for it, they were assuming it was Stellar Wind, not something that now appears to (also) relate to cybersecurity.

Indeed, the government suggests the ACLU shouldn’t assume this is a “Terrorist Surveillance Program” document.

7 Plaintiffs conclude that the OLC memorandum at issue here must relate to the Terrorist Surveillance Program and the reauthorization of that program because the attorney who authored the memorandum also authored memoranda on the Terrorist Surveillance Program. Pls.’ Opp. at 10. The fact that two OLC memoranda share an author of course establishes nothing about the documents’ contents, nature, purpose, or effect.

Suggesting (though not stating) the memo is not about TSP is not the same as saying it is not about Stellar Wind or the larger dragnets Bush had going on. But it should mean ACLU gets another shot at it, since they were looking only for SW documents the last time.

Which is interesting given the way DOJ argues, much more extensively, that this memo does not amount to working law. It starts by suggesting Wyden’s filing arguing a “key assertion” in the government’s briefs is wrong.

3 Senator Wyden asks the Court to review a classified attachment to a letter he sent Attorney General Loretta Lynch in support of his claim that a “key assertion” in the Government’s motion papers is “inaccurate.” Amicus Br. at 4. The Government will make the classified attachment available for the Court’s review ex parte and in camera. For the reasons explained in this memorandum, however, the Senator’s claim of inaccuracy is based not on any inaccurate or incomplete facts, but rather on a fundamental misunderstanding of the “working law” doctrine.

In doing so, it reveals (what we already expected but which Wyden, but apparently not DOJ, was discreet enough not to say publicly) that the government did whatever this John Yoo memo said government could do.

But, it argues (relying on both the DC and 2nd circuit opinions on this) that just because the government did the same thing a memo said would be legal (such as, say, drone-killing a US person with no due process), it doesn’t mean they relied on the memo’s advice when they took that action.

The mere fact that an agency “relies” on an OLC legal advice memorandum, by acting in a manner that is consistent with the advice, Pls.’ Opp. at 11, does not make it “working law.” OLC memoranda fundamentally lack the essential ingredient of “working law”: they do not establish agency policy. See New York Times, 806 F.3d at 687; Brennan Center, 697 F.3d at 203; EFF, 739 F.3d at 10. It is the agency, and not OLC (or any other legal adviser), that has the authority to establish agency policy. If OLC advises that a contemplated policy action is lawful, and the agency considers the opinion and elects to take the action, that does not mean that the advice becomes the policy of that agency. It remains legal advice. 5

5 Nor could the fact that any agency elects to engage in conduct consistent with what an OLC opinion has advised is lawful possibly constitute adoption of that legal advice, because taking such action does not show the requisite express adoption of both the reasoning and conclusion of OLC’s legal advice. See Brennan Center, 697 F.3d at 206; Wood, 432 F.3d at 84; La Raza, 411 F.3d at 358.

Effectively, DOJ is saying that John Yoo wrote another stupid memo just weeks before he left, the government took the action described in the stupid memo, but from that the courts should not assume that the government took Yoo’s advice, this time.

One reason they’re suggesting this isn’t TSP (which is not the same as saying it’s not Stellar Wind) is because it would mean the government did not (in 2005, when Bush admitted to a subset of things called TSP) confirm this action in the same way Obama officials danced around hailing that they had killed Anwar al-Awlaki, which led to us getting copies of the memos used to justify killing him.

In short, the government followed Yoo’s advice, just without admitting they were following his shitty logic again.

Domestic Collection and Stellar Wind

April 27, 2016/2 Comments/in EO 12333 /by emptywheel

I’m in the middle of comparing John Yoo’s May 17, 2002 letter to Colleen Kollar-Kotelly (which is largely the November 2, 2001 justification he wrote for Stellar Wind) with Jack Goldsmith’s May 6, 2004 memo on Stellar Wind, which reined in some aspects of Stellar Wind. And I realized something about the authorization process.

On page 17 of his memo, Goldsmith describes the previous opinions issued by OLC. The discussion is largely redacted, but it does describe say the October 4, 2001 memo “evaluated the legality of a hypothetical electronic surveillance program,” whereas the November 2, 2001 memo “examined the authorities granted by the President in the November 2, 2001 Authorization of STELLAR WIND and concluded that they were lawful.”

Already, that’s an interesting assertion given that the Yoo letter doesn’t do that entirely. First, at least in the letter to Kollar-Kotelly, Yoo also treated the program as hypothetical.

Electronic surveillance techniques would be part of this effort. The President would order warrantless surveillance in order to gather intelligence that would be used to prevent and deter future attacks on the United States. Given that the September 11 attacks were launched and carried out from within the United States itself, an effective surveillance program might include individuals and communications within the continental United States. This would be novel in two respects. Without access to any non-public sources, it is our understanding that generally the National Security Agency (NSA) only conducts electronic surveillance outside the United States that do not involve United States persons. Usually, surveillance of communications by United States persons within the unites states is conducted by the FBI pursuant to a warrant obtained under the Foreign Intelligence Surveillance Act (“FISA”). Second, interception could include electronic messages carried through the internet, which again could include communications within the United States involving United States persons. Currently, it is our understanding that neither the NSA nor law enforcement conducts broad monitoring of electronic communications in this matter within the United States, without specific authorization under FISA.

[snip]

Thus, for example, all communications between United States persons, whether in the United States or not, and individuals in [redacted–likely Afghanistan] might be intercepted. The President might direct the NSA to intercept communications between suspected terrorists, even if one of the parties is a United States person and the communication takes place between the United States and abroad. The non-content portion of electronic mail communications also might be intercepted, even if one of parties is within the United States, or one or both of the parties are non-citizen U.S. persons (i.e., a permanent resident alien). Such operations would expand the NSA’s functions beyond the monitoring only of international communications of non-U.S. persons. [my emphasis]

Importantly, these hypothetical descriptions come from the section of Yoo’s letter before it appears to begin tracking his earlier memo closely. So it’s unclear whether this description of Stellar Wind matches the one in the November 2 memo. It’s certainly possible that Yoo gave an incomplete version of what he had in the earlier memo or even pulled in (hypothetical) language from the October 4 memo. It’s possible, too, that language on domestic content collection reflected a retroactive review Yoo did of the first authorization. (An extended discussion of how Yoo’s early memos track the Authorizations — including discussion of another hypothetical memo Yoo wrote on September 17 — starts at PDF 361.)

Of particular interest, this hypothetical description includes the possibility of intercepting entirely domestic Internet communications (see emphasized language). We know — from the unredacted NSA Stellar Wind IG Report and even from the redacted Joint IG Report — that was something included in the first presidential Authorization, but not the subsequent ones.

The wording of the first authorization could have been interpreted to allow domestic content collection where both communicants were located in the U.S. or were U.S. persons. General Hayden recalled that when the Counsel to the Vice President pointed this out, General Hayden told him that NSA would not collect domestic communications because 1) NSA was a foreign intelligence agency, 2) NSA infrastructure did not support domestic collection, and 3) his personal standard was so high that there would be no problem getting a FISC order for domestic collection.

We also know NSA did collect some domestic collection — on about 3,000 selectors, possibly triggered to non-US persons within the US — at least until Stellar Wind got transitioned to FISA in 2009.

This is a minor, but potentially important one. Yoo was writing hypothetical authorizations for stuff the NSA later pretended not to be authorized to do, but was doing. Those earlier hypothetical authorizations didn’t go away. And therefore, no matter what the authorizations said, there’d still be that authorization sitting there.

The Obama Administration Almost Doubled Down on Yoo’s Illegality

April 8, 2016/4 Comments/in EO 12333, FISA /by emptywheel

Over at JustSecurity the other day, ACLU’s Patrick Toomey argued that the Administration’s current interpretation of FISA — especially its embrace of upstream surveillance — means the Obama Administration has gone beyond John Yoo’s thinking on surveillance as exhibited in his May 17, 2002 letter to FISC judge Colleen Kollar-Kotelly.

Perhaps most remarkably, however, the Obama Justice Department has pressed legal theories even more expansive and extreme than Yoo himself was willing to embrace. Yoo rounded out his Stellar Wind memo with an effort to reassure Judge Kollar-Kotelly that the government’s legal interpretation had limits, saying: “Just to be clear in conclusion. We are not claiming that the government has an unrestricted right to examine the contents of all international letters and other forms of communication.” But that is essentially the power the NSA claims today when it conducts Upstream surveillance of Americans’ Internet communications. The NSA has installed surveillance equipment at numerous chokepoints on the Internet backbone, and it is using that equipment to search the contents of communications entering or leaving the country in bulk. As the ACLU recently explained in Wikimedia v. NSA, this surveillance is the digital analogue of having a government agent open every letter that comes through a mail processing center to read its contents before determining which letters to keep. In other words, today the Obama administration is defending surveillance that was a bridge too far for even John Yoo.

I’m not sure I’m convinced. After all, the Administration claims it is not examining the contents of all international letters, but rather only looking at those where selected identifiers show up in data packets. Yeah, I know it’s a bullshit argument, but they pretend that’s not searching the contents, really. Moreover we have substantial reason to believe they were doing (some) of this anyway.

But there is a curious relationship between a claim Yoo made in his letter and the Obama Administration’s views on FISA.

In the letter, Yoo writes,

FISA purports to be the exclusive means for conducting electronic surveillance for foreign intelligence, … FISA establishes criminal and civil sanctions for anyone who engages in electronic surveillance, under color of law, except as authorized by statute, warrant, or court order. 50 U.S.C. § 1809-10. It might be thought, therefore, that a warrantless surveillance program, even if undertaken to protect the national security, would violate FISA’s criminal and civil liability provisions.

Such a reading of FISA would be an unconstitutional infringement on the President’s Article II authorities. FISA can regulate foreign intelligence surveillance only to the extent permitted by the Constitution’s enumeration of congressional authority and the separation of powers.

[snip]

[A]s we explained to Congress during the passage of the Patriot Act, the ultimate test of whether the government may engage in foreign surveillance is whether the government’s conduct is consistent with the Fourth Amendment, not whether it meets FISA.

This is especially the case where, as here, the executive branch possess [sic] the inherent constitutional power to conduct warrantless searches for national security purposes.

Effectively, Yoo is saying that even if they blow off FISA, they will be immune from the penalties under 50 USC §1809-10 so long as what they were doing fulfilled the Fourth Amendment, including an expansive reading of special needs that Yoo lays out in his memo. (Note, this was explained in the DOJ Stellar Wind IG Report — starting at PDF 47 — but this letter makes it more clear.)

As a reminder, on two occasions, John Bates disagreed with that interpretation, first in 2010 when he ruled NSA couldn’t continue to access the five years of data it overcollected under the PRTT Internet dragnet, and then again in 2011 when he said the government couldn’t disseminate the illegally collected upstream data (and Vaughn Walker disagreed in a series of rulings in the Al Haramain case in 2010, though the 9th Circuit partially overturned that in 2012). We know, thanks to Snowden, that the government considered appealing the order. And in his summary of the resolution of this issue, Bates made it clear that the government’s first response was to say that limits on illegally collected data don’t apply.

However, issues remained with respect to the past upstream collection residing in NSA’s databases. Because NSA’s upstream collection almost certainly included at least some acquisitions constituting “electronic surveillance” within the meaning of 50 U.S.C. § 1801 (f), any overcollection resulting from the government’s misrepresentation of the scope of that collection implicates 50 U.S.C. § 1809(a)(2). Section 1809(a)(2) makes it a crime to “disclose[] or use[] information obtained under color of law by electronic surveillance, knowing or having reason to know that the information was obtained through electronic surveillance not authorized” by statute. The Court therefore directed the government to make a written submission addressing the applicability of Section 1809(a), which the government did on November 22, 2011. See [redacted — probably a reference to Bates’ July 2010 opinion], Oct. 13, 2011 Briefing Order, and Government’s Response to the Court’s Briefing Order of Oct. 13, 2011 (arguing that Section 1809(a)(2) does not apply).

Ultimately, though, the government not only (said it) destroyed the illegal upstream data, but claims to have destroyed all its PRTT data in a big rush (so big a rush it didn’t have time to let NSA’s IG certify the intake collection of data).

And it replaced that PRTT program by searching data under SPCMA it claimed to have collected legally … somewhere.

I don’t pretend to understand precisely went on in those few weeks in 2011, though it’s clear that Obama’s Administration at least considered standing by the spirit of Yoo’s claim, even though the opinion itself had been withdrawn.

But I do know that at least through 2009, the government treated all its PRTT and Section 215 data as EO 12333 data, and in fact the providers appear not to have distinguished it either (more on this in upcoming days, hopefully). That is, it was collecting data with FISC sanction that it treated as data it collected outside of FISC sanction (that is, under EO 12333), and it was ignoring the rules FISC imposed.

Which leads me to wonder whether the government still doesn’t believe it remains immune from penalties laid out in FISA.

John Yoo’s Two Justifications for Stellar Wind

April 6, 2016/7 Comments/in EO 12333, FISA /by emptywheel

Because I’m a hopeless geek, I want to compare the what we can discern of the November 2, 2001 memo John Yoo wrote to authorized Stellar Wind with the letter he showed FISA Presiding Judge Colleen Kollar-Kotelly on May 17, 2002. The former is almost entirely redacted. But as I’ll show, the two appear to be substantially the same except for small variations within paragraphs (which possibly may reflect no more than citations). The biggest difference is that Yoo’s memo appears to have two pages of content not present in the letter to Kollar-Kotelly.

What follows is a comparison of every unredacted passage in the Yoo memo, every one of which appear in exactly the same form in the letter he wrote to Kollar-Kotelly.

The first unredacted line in Yoo’s memo — distinguishing between “electronic surveillance” covered by FISA and “warrantless searches” the President can authorize — appears in this paragraph in the letter.

The line appears on page 7 of Yoo’s memo, but page 5 of his letter (which also includes some foofy introductory language for Kollar-Kotelly). That says there’s already 2 pages of information in Yoo’s memo that doesn’t appear in the letter. Yoo’s description of the surveillance program in the letter to Kollar-Kotelly is actually fairly short (and written entirely in the conditional voice), so there may be more of that in the actual memo. Also, anything that didn’t involve electronic surveillance — such as the collection of financial data — would not necessarily be relevant to FISC. But as I argue below, it’s also possible Yoo made claims about executive power in those two paragraphs that he rewrote as a two-page addition to for Kollar-Kotelly’s benefit.

The next unredacted passage in the memo consists of the first sentences of these two paragraphs.

They appear on page 9 of Yoo’s memo and page 7 of the letter, and it appears that the space in between the two is consistent — suggesting that the interim content remains the same.

The next unredacted passage appears on page 12 of Yoo’s memo, page 10 of the letter.

While the general pagination still seems to be roughly tracking (again, suggesting the interim content is at least similar), the spacing of this paragraph is clearly different (note how the sentence begins in a different place in the column), suggesting Yoo may have made an even stronger defense of inherent authority in his memo, or perhaps that OLC has precedents for such a claim that Yoo thought inappropriate to share with the FISC. It’s possible this and later paragraph spacing differences arise from classification marks at the beginning of each paragraph, except the passages from the beginning of paragraphs seem to match up more closely than those from the middle of them.

Screen Shot 2016-04-05 at 7.30.51 PM

The next unredacted passage, on page 17 of Yoo’s memo and 15 of the letter, extend the claim that Congress can’t limit the President’s use of pen registers used to defend the nation. That’s followed closely by Yoo’s shift to arguing that intelligence gathering “in direct support” of military operations does not trigger the Fourth Amendment.

That Time When John Yoo Deemed EO 12333 Optional (Working Thread)

February 29, 2016/2 Comments/in EO 12333 /by emptywheel

I Con the Record has just released the May 17, 2002 letter John Yoo wrote to Colleen Kollar-Kotelly justifying Stellar Wind. This either lays out for the first time or repeats Yoo’s claim — which I first reported in 2007, based on a Sheldon Whitehouse Senate address, here — that the President doesn’t have to follow EO 12333.

This will be a working thread.

(2) Note Yoo says the attacks caused 5,000 deaths, well beyond the time when authorities knew it to be closer to 3,000.

(2) Yoo mentioned the anthrax attack. Did NSA use Stellar Wind to investigate it?

(2) Yoo uses a more moderate justification here — military being deployed to protect buildings — than Goldsmith did in his 2004 memo, where he talked about specific military flights.

(2) Check EO on creating Homeland Security office on domestic program.

(2) As soon as Yoo starts talking about Stellar Wind, he adopts the conditional tense: “Electronic surveillance techniques would be part of this effort.” This of course follows on Yoo admitting Congress modified FISA (though he doesn’t name the statute).

(2) Note in this really squirrelly hypothetical section, Yoo says the surveillance could include email “within” the US, which would be entirely domestic.

(2-3) Note throughout Yoo describes Bush as “Chief Executive.”

(3) Yoo points to absence of a charter as basis for doing whatever NSA wants.

(3) “Congress, however, has not imposed any express statutory restrictions on the NSA’s ability to intercept communications that involve United States citizens or that occur domestically.” (based on the absence of such language in NSA)

(4) I believe the second redaction is designed to enable the wiretapping of people claimed to be tied to the anthrax attack.

(5) Here’s the passage that said EO 12333 is optional.

(4-5) I find Yoo’s language the more troubling given what precedes it — the rationale.

I’ll come back to this, but note how “domestic” gets defined here. Much of this is still on the books and explains why Muslims get treated differently.

(5, 6) Note Yoo’s explanation for doing this off the books.

Need for secrecy
Inability to get FISC to approve bulk content collection or domestic metadata collection
No knowledge of identity of target

That’s not speed, which later became the excuse

(5) “FISA only provides a safe harbor for electronic surveillance, and cannot restrict the President’s ability to engage in warrantless searches that protect the national security.”

(5) Note Yoo refers to the metadata dragnet as “general collection,” which sounds an awful lot like a general warrant.

(7) The redactions on 7 are especially interesting given likelihood they conflict with either what K-K, Bates, or Howard subsequently approved.

(8) The timing of this is remarkable. This letter was written on the same date that Ashcroft changed the rules on the wall, which Lamberth unsuccessfully tried to impose some limits on. Then, on July 22, OLC further expanded the GJ sharing address in FN 8.

(8) Note, again, how Yoo is rewriting Keith and Katz.

(10) again, Yoo seems to be laying the groundwork for back door searches, which makes me wonder whether that’s why this got released?

(12) I don’t believe this border exception appears in Goldsmith. Which suggests there’s something with the way this was applied that is particularly problematic.

(13) This must be the language in question. Goldsmith used another means to justify cross-border collection, while admitting it outright.

(14) This language also disappears from later justifications, suggesting it is part of the problem.

The discussion continues onto the next page. It is of particular interest that K-K got this letter, given that her category distinctions probably addressed these distinctions.

(15) Bingo. This might be a very simple explanation for why they had to go to FISC.

(17) This passage about picking the Defense Secretary rather than AG is pretty much what I noted in my post on the underyling 4A argument, but it has ramifications for the post-2004 program. Also note how closely it piggybacks with the changes to AG guidelines and the

This language explains why they weren’t looking in Stellar Wind for Brady material, and also explains how they do parallel construction (which plays out in the IG Report).

(19) This section lays out the need for the scary memos, without revealing to K-K they exist.

(21) The big redacted section–the biggest redaction in the letter–suggests they’re still hiding the capture and pull up method of this, and therefore the sheer bulk of all this. That’s all the more interesting given that the wall was coming down at that moment. The other redactions in this section, too, seem to track the indexing function. Again, it’s interesting K-K had read (or reviewed) this before the PRTT discussion.

The New Stellar Wind Language

September 21, 2015/in EO 12333 /by emptywheel

Charlie Savage got another drip drip drip of language declassified from the Joint IG Stellar Wind reports (his story, annotated document).

The new language reveals a bit more about what Alberto Gonzales included in his March 11, 2004 authorization that led Jim Comey to renew his resignation threat on March 16, 2004. And it reiterates a detail about the March 19, 2004 modification I’ve covered repeatedly (though leaves the other at least two March 19, 2004 modifications, as well as the April 2 one(s), entirely redacted).

One thing that did get changed on March 19 — the exclusion of the Iraq targeting John Yoo had authorized in 2003 — is now unredacted. That language only permits the use of Stellar Wind with al Qaeda, groups affiliated with al Qaeda, or “another group that [the President determines] for the purposes of this Presidential Authorization is in armed conflict with the United States and poses a threat of hostile action within the United States.” This language is precisely consistent with language in the May 6, 2004 Jack Goldsmith opinion I’ve noted before — indeed, the newly unredacted language appears unredacted in that memo (see page 16). Goldsmith situates the broader-than-al Qaeda authorization, in part, in this language in the 2001 AUMF.

The Congressional Authorization contains another provision that is particularly significant in this context. Congress expressly recognized that “the President has authority under the Constitution to take action to deter and prevent acts of international terrorism against the United Stales.” Congressional Authorization, pmbl. That provision gives express congressional recognition to the President’s inherent constitutional authority to take action to defend the United States even without congressional support.

Note, Savage misstates that the change only permits targeting “Al Qaeda, rather than allowing it to be used for other types of international counterterrorism investigations,” ignoring that the President (and Goldsmith’s subsequent OLC memo) permitted the inclusion of other international terrorist groups. That may reflect reporting that will show up in his book, but the language adopted pursuant to DOJ complaints, both in the March 19 authorization and in Goldsmith’s memo, clearly permits targeting of more than just al Qaeda at the President’s prerogative, so long as it actually has to do with “international” terrorism (Goldsmith distinguishes international terrorism from domestic in an effort to comply with the Supreme Court Keith decision, but not in a way that I believe to be adequate in logic or, since Goldsmith’s opinion, implementation).

We don’t know whether two other things newly revealed to be in the March 11, 2004 memo got changed, because we don’t see the other March 19 modifications.

First, Gonzales explicitly asserted in the March 11 authorization that Article II authority “displace[s] the provisions of law, including the Foreign Intelligence Surveillance Act and chapter 119 of Title 18 of the United States Code (including 18 U.S.C. §2511(f) relating to exclusive means), to the extent any conflict between provisions and such exercises under Article III.” This idea may have been tweaked in one of the modifications, given that Goldsmith’s memo largely provides an explanation for how FISA got displaced via the AUMF, but I also suspect that, even as problematic as Goldsmith’s memo is, it was probably stronger than any modifications before he issued the memo.

Far more interesting is the language Gonzales included in the March 11 authorization designed to retroactively authorize the bulk collection of entirely domestic metadata. It did so by claiming that metadata “is ‘acquired’ for the purposes of subparagraph 4(b) above when, and only when, the Department of Defense has searched for and retrieved such header/router/addressing-type information, … and not when the Department obtains such header/routing/addressing-type information.” Effectively, that March 11 authorization — and Gonzales’ effort to pretend they hadn’t been violating the law for 3 years — is the source of the Orwellian definition of “collect” that James Clapper relied on when caught in his lies about dragnets. There is a great deal in Goldsmith’s opinion on metadata that remains redacted, so Goldsmith may well have amended this formula. And I think FISC operates with a more reasonable definition of “collect” than the IC does (which ought to be a problem!). But some version of that definition covers probably even more invasive spying of US persons under SPCMA, and that language and logic was always withheld from FISC. My strong suspicion is that Goldsmith did change this. I even think it remotely possible that the scope of SPCMA has been modified since James Baker became FBI General Counsel.

Regardless of whether that definition was reined in in the modifications and/or Goldsmith’s memo, however, that’s still the way the government thinks.