Posts

Three Questions at the Start of an Intelligence Review

/145 Comments/in , , , , , /by

Why? Why? Why not?

There’s been a lot of focus on the narrow legal battles over the documents seized at Mar-a-Lago, but sometimes stepping back to look at the big picture helps bring the conflict into focus. As a legal matter and a political matter, Trump, his lawyers, and his apologists are trying to make the claim that this is just a dispute about documents, like overdue library books. The passion with which the DOJ went after them since receiving the referral from NARA last February, especially the ferocity of the legal arguments and filings over the last two weeks, demonstrates how wrong the DOJ believes that framing to be.

I agree with the DOJ.

The documents are not really what is being fought over — the battle is over the damage  (hypothetical or actual) done to our intelligence services, our national defense, and our broader foreign policy by Trump’s possession of these documents at Mar-a-Lago. The documents are the first puzzle pieces the intelligence community [IC] has to put together, to fill in the whole picture and plan a way forward.

To understand why, let’s parse out what an intelligence review might look like. What follows is not based on any insider sources at the DOJ, ODNI, or any other federal agencies, but on my own experience (long ago) with classified materials and the general experiences of others I know with deeper and more recent work in classified matters, as well as analyzing other cases where classified materials were stolen from the government and passed along to foreign governments.

An intelligence review is designed to look at three things: what got exposed, to whom, and what dangers does that pose to intelligence sources, methods, and broader foreign policy objectives? These are all backwards-looking questions, to understand how this could have happened in the first place. They also serve as the starting point for forward-looking actions, as we and our allies pivot our overt and covert foreign policy approaches in a new context. Think of Klaus Fuchs, a German-born British scientist who passed US and British nuclear secrets to the USSR in the 1940s. A backwards looking intelligence review ultimately identified him as the spy and spotted the flaws in our security procedures, and a forward looking review pivoted the US and British policy toward a world with nuclear powers who opposed each other.

In the current case, the IC review begins with three interrelated questions:

  1. Why did Trump take government documents to Mar-a-Lago in the first place?
  2. Why these documents?
  3. Why not those other documents?

The second and third questions begin to move toward an answer to the first question, so let’s start there. Broadly speaking, I see five possible answers, each of which poses different dangers.

1: Vanity

If this is the answer to that first question, we would expect to find that Trump took documents that made him look good, that pointed to actions that he believed he could claim credit for, or that simply let him feel powerful because he knows stuff very few others know. Think of these as Extreme Presidential Souvenirs. These would be documents that shout to the world, “Look at how great Trump is . . .”

Danger: Simply having documents like this in his possession would likely not be enough for Trump’s ego. Trump’s ego would demand that he show them to others, so that they would know how great Trump is. The level and kind of danger depends on who the “others” are, and who they might have spoken to about what Trump showed them.

2: Fear

In this scenario, the IC review would see that Trump took documents that would help cover up his failures and/or possible crimes, such as a full transcript of the “Perfect Phone Call” with Zelenskyy. These would be documents that whisper in Trump’s ear, “This could get you into trouble. You better hide this . . .”

Danger: These are the documents least likely to be shared by Trump, so in that respect they are safe. On the other hand, they become prime material for blackmail if unfriendly parties realize he has them. Trump’s nightmare is getting a phone call about these documents, threatening to expose the documents to the “wrong” people. “I’d like you to do me a favor, though . . .”

3: Greed

Given Trump’s proclivity to monetize anything he can for his own personal gain, it is hard to imagine that Trump would not be looking at anything that crossed his desk to see how he might make money on it. (“Hmmm . . . I’m doing some traveling? OK, which of my properties are closest, and how much can I charge the Secret Service for staying there?”) Documents that showed him something that would let him make money would be particularly tempting to Trump. Think of this as corporate espionage, or a twisted form of insider trading. Perhaps he received knowledge of foreign government’s as yet unannounced plans to develop certain properties overseas, and figured he could jump in, buy the property first, and then get bought out for a profit. Or maybe he would buy the property next to the future development and cash in when the government project became public and went forward, driving up the value of what he purchased. Perhaps these were not projects led by foreign governments, but by US corporations acting abroad whose plans were picked up as part of a signals intelligence surveillance program aimed at less-than-friendly nations. Documents like this would be calling out to his wallet, telling him “Hey, you can really use this . . .”

Danger: Suppose Trump acts on this information in some way, and the foreign government in question starts wondering “Did Trump merely get lucky in choosing to invest right where our project was going in, or did US spies give him the information?” Questions like that might lead to the exposure of human assets (sources) and signals intelligence capabilities (methods), which in turn could lead to those sources being shut down/arrested/killed, those signals intelligence methods being countered, or either the sources or methods being turned and used to feed false information to the US.

4: Corruption

As bad as #3 is, this scenario is the IC nightmare: Trump took documents that he knows other foreign governments, perhaps some of our greatest enemies, would love to have, and then deliberately passed them along to those governments. It might be to get revenge on Biden and the Dems for beating him in 2020. It might be to sabotage the work of the current administration and cause great public political problems for the Dems, to enable his return to the White House in 2024. It might be that some foreign adversary has compromising information about Trump or holds a private loan to Trump, his family, or his Trump Organization, and that country demanded classified information from Trump in exchange for not revealing the compromising information they hold or for not calling in the loan he could not immediately repay.

Danger: Beyond the damage done to sources, methods, and US foreign policy objectives created by disclosing the classified information in these documents, this scenario is worse. It weakens our relationships with our allies and harms our position in the world, simply by indicating we can’t keep secrets and by making us weaker through whatever is revealed. Should Trump have provided classified intelligence deliberately, it only gives those folks more leverage over Trump, which they would use to push for more information and more favors. Once you’ve turned over classified information to a hostile power, those folks own you forever. “Nice resort you’ve got here. It’d be a shame if anything were to happen to it.”

And it is not beyond the realm of possibility that foreign governments might lean on Trump to use his family to further their goals. “You need to have Jared talk to his friends in the Middle East, and convince them to . . . “

5: Some/all of the above

Trump might have taken some documents to feed his ego, others to hide them, and still others to try to monetize their contents. He might have taken some for his own reasons, and others because he was pressured to do so by hostile powers. The permutations are . . . troubling.

Danger: some/all of the above.

HOW BAD IS ALL THIS? DON’T ANSWER YET . . .

On top of these five possible explanations of Trump’s motives, one other thing is absolutely certain. Documents like those that were seized by the DOJ would have been catnip for the intelligence agencies of other nations. Once word got out that Trump had taken highly classified documents out of the WH (or once folks even suspected he had done so), all manner of foreign spies no doubt became very interested in Mar-a-Lago – much more than they had been during the Trump administration itself. It’s hard as hell to get into the WH and take classified materials, or to plant electronic surveillance devices inside the WH. Mar-a-Lago, on the other hand, is a relative sieve, especially after Trump left office and the security around Trump was much more directed to protecting his person rather than protecting all the stuff around a sitting president. At Mar-a-Lago these days, you pay your membership fee, and walk right in for a grand tour. Whatever the reason Trump chose to take these documents, even if he simply wanted to hold onto them as presidential souvenirs and he does nothing with them otherwise, should foreign agents copy them or steal them from Mar-a-Lago, that’s almost as bad it as it gets for the US.

Danger: Exposing whatever classified information to the prying eyes of our adversaries not only exposes sources and methods of our intelligence services, but provides our adversaries with insight into our strengths and weaknesses, depending on what the intelligence said. It also opens Trump to blackmail, as noted above in scenarios #2 and 4. “Well look what we found at your home. It sure would be terrible if the FBI were to discover that you were so sloppy with security that we were able to waltz right in and take them.”

To sort out the likelihood of each of these scenarios and the specific dangers posed, those conducting the IC review will do a couple of things. First, the leaders of the intelligence agencies are likely going back to the original creators of these documents, to tell them they were found in unsecured locations at Mar-a-Lago, and therefore (a) the creators need to assess what the specific danger would be if this particular document were to be exposed, and (b) the creators should look around to see if they have any signs that these documents had been shared already. The former is to measure the hypothetical damage, while the latter is to assess the likelihood that this is not hypothetical. Did spies suddenly go quiet, or did the quality of their information suddenly become different? Did satellites that used to provide good, regular photos of intelligence targets begin to provide much less good intelligence? All the while, the IC reviewers know that this is likely even worse.

EVEN WORSE? HOW CAN THIS BE EVEN WORSE?

If any of this information came to the US IC through our partnerships with other friendly nations (like Five Eyes or NATO), that means going to the intelligence folks in those countries who trusted us with their secrets and telling them that their trust was misplaced, at least while Trump was in office. They are the folks who need to assess the danger that exposure of this information would create, and who would have to see if there were signs that this information had already been shared. Of course we would promise to do whatever we could to assist them in that analysis, but that’s like telling a shopkeeper that you will help sweep up the shards of all the broken crystal after your kid threw a bowling ball into the display case.

Danger: It’s bad enough if our secrets get exposed, but if we let their secrets get exposed, that’s going to make them less likely to trust us in the future. As I said before, this is why having career diplomat William Burns as head of the CIA was a stroke of genius by Biden, and why Burns and the rest of the IC is no doubt bending over backwards to help Garland get this right, and bending farther over backwards to help our allies get this fixed.

SO HOW MIGHT THIS REVIEW WORK?

This is why the analysis of what was taken and trying to determine Trump’s motive(s) is the starting place. It leads to other critical questions like these:

  • What does Trump’s selection of documents — classified and unclassified — tell us about what is going on?
  • Were the documents tucked away by Trump over a long period of time, or did they all get tucked away in a specific, relatively short time period?
  • And what else was tucked in the drawers, file folders, and boxes next to these classified documents? Are there notes or letters that appear to have been written based on the content of the classified materials?

Depending on what this initial analysis reveals, the reviewers will begin to talk to the counterintelligence people in their agencies, especially if there is some concentration of subject matters or particular time frames involved.

  • Have you noticed any unusual behavior in known foreign agents around those time frames?
  • Was there any unusual signals traffic between foreign agents here and their bosses back home?
  • Were there any new agents who arrived here, who have a particular focus to their work that meshes with the subject matters of the documents Trump took? What actions have they taken?

To dig into all this, the analysts will be looking at other information and also be in contact with the folks in the field who are managing the human sources or electronic surveillance methods, to see what insights they might have. They know that decisions will need to be made about protecting or extracting sources who might be in danger, shutting down electronic surveillance already in place (pull out/relocate bugs and cameras if possible, re-direct satellite orbits, change communications frequencies, reprogramming software, etc.), and otherwise working to replace these sources and methods in some way to avoid further exposure. They hope to restore secrecy to the people and programs, and restore quality to the intelligence that might have been harmed through exposure.

While all this covert review work is going on, the FBI will no doubt be doing an ordinary shoe-leather investigation into the folks who have been going in and out of Mar-a-Lago over the last 18 months after the security of the resort was scaled back to simply protect the former president. They will be looking at guests and staff alike, trying to see what can be learned from videos, logs of visits, work schedules, and in some cases interviews. They will be looking at the White House document handling, especially after December 18, 2020 when the head of the White House Office of the Staff Secretary resigned and no one was named to take his place — even in an acting capacity — until January 20, 2021. They will be doing deeper domestic investigations of any new foreign agents that were identifies by the IC analysts.

And then there’s the investigation that NARA is probably already trying to complete: what other documents from the Trump White House were not turned over?

This is all very time consuming and expensive. You don’t want to do this if it isn’t necessary, but you absolutely have to do it if these sources and methods are likely to have been (or actually were) blown. Only when the Why?, Why?, and Why not? questions have been answered can the forward looking work really begin in earnest.

There’s a lot more that can be inferred about what an intelligence review would contain, but one thing is certain. The panel of judges from the 11th Circuit Court of Appeals and Special Master Raymond Dearie are focused on what Judge Cannon does not want to recognize: this is not a case about misfiled documents, but a national security case in which documents hold the key to assessing the dangers posed and actual damage done to our nation, so that the current government can begin to address it.

The Redacted Mar-a-Lago Affidavit DOJ Should Submit

/68 Comments/in , , , /by

As you may know, DOJ is ordered by Magistrate Judge Bruce Reinhart to submit a “suggested” redacted version of the warrant affidavit for the Mar-a-Lago search executed on August 8, 2022.

The federal magistrate judge who authorized the warrant to search Donald Trump’s Mar-a-Lago estate emphasized Monday that he “carefully reviewed” the FBI’s sworn evidence before signing off and considers the facts contained in an accompanying affidavit to be “reliable.”

Magistrate Judge Bruce Reinhart offered his assessment in a 13-page order memorializing his decision to consider whether to unseal portions of the affidavit, which describe the evidence the bureau relied on to justify the search of the former president’s home.

“I was — and am — satisfied that the facts sworn by the affiant are reliable,” Reinhart said in the order.

Reinhart ruled last week that he would consider unsealing portions of the affidavit after conferring with the Justice Department and determining whether proposed redactions would be sufficient to protect the ongoing criminal investigation connected to the search. But in his order, Reinhart emphasized that he may ultimately agree with prosecutors that any redactions would be so extensive that they would render the document useless.

The last sentence of that quote is the key. Unless DOJ is going to capitulate to the clicks and reads voyeurism of the overly exuberant political press, nothing whatsoever should be released unless and until charges are filed against some defendant, whether it be Trump or otherwise. Why? Because that it how it is done, and properly so.

Reinhart has received abuse and threats. Is his willingness to even entertain a “redacted version” sound under such threat? His decision will yield the answer to that question.

In the meantime, I have a proposed example of what DOJ should submit to Reinhart. Yes, this example is from CAND, not SDFL, but it is exactly what ought be handed over to Reinhart. And if Reinhart grants any “redacted version”, DOJ should appeal immediately and fully. Leave the affidavit sealed. The voyeuristic public, and press, thinks they have an interest because Trump. But they really do not. Do it the right and normal way.

Merrick Garland Preaches to an Overseas Audience

/32 Comments/in , , , , , /by

Alexander Vindman thanks Attorney General Garland

When Merrick Garland gave his brief press statement yesterday about the search of Mar-a-Lago, he had various audiences in mind. One was Donald Trump and his defenders, calling their bluff by announcing that the DOJ was moving to unseal the search warrant and list of items seized. Another was his own DOJ employees, to let them know that he had their backs and would support them when the rightwing attacked them. But as I listened to him, I thought that perhaps the most critical audience were the leaders of nations all around the globe — and especially the heads of their intelligence services. When hours later the story broke that some of the documents the DOJ were seeking were nuclear related, I dropped the mental “perhaps”. To build on one of Marcy’s previous posts, let me add that this is a huge foreign policy story, which is largely missing from the current discussion in the media.

Think back to the beginning of the Trump administration. On May 15, 2017, a disturbing story hit the news:

President Donald Trump disclosed highly classified information to Russia’s foreign minister about a planned Islamic State operation, two U.S. officials said on Monday, plunging the White House into another controversy just months into Trump’s short tenure in office.

The intelligence . . . was supplied by a U.S. ally in the fight against the militant group, both officials with knowledge of the situation said.

H.R. McMaster categorically denied it, and as the story unfolded over time, McMaster was lying through his teeth. The unnamed ally was later revealed to be Israel, who had a mole inside an ISIS cell. And Trump blithely blew the cover of that Israeli asset by bragging to Lavrov.

Shortly after this meeting (at which Trump also bragged about just having fired James Comey), US intelligence officials made a bold move. From CNN:

In a previously undisclosed secret mission in 2017, the United States successfully extracted from Russia one of its highest-level covert sources inside the Russian government, multiple Trump administration officials with direct knowledge told CNN.

A person directly involved in the discussions said that the removal of the Russian was driven, in part, by concerns that President Donald Trump and his administration repeatedly mishandled classified intelligence and could contribute to exposing the covert source as a spy.

The decision to carry out the extraction occurred soon after a May 2017 meeting in the Oval Office in which Trump discussed highly classified intelligence with Russian Foreign Minister Sergey Lavrov and then-Russian Ambassador to the US Sergey Kislyak. The intelligence, concerning ISIS in Syria, had been provided by Israel.

This was the opening act of the Trump presidency. From the very beginning, intelligence officers worried about how Trump handled classified information. Our intelligence officers worried, and so did the intelligence officers of our allies, as they asked themselves some version of the question “Will Trump say something or do something that will get us killed?” In a completely different way, so did the intelligence officers of our adversaries. If Trump were to rashly reveal something he learned about the capabilities of our adversaries, it could have disastrous consequences for those countries and their leaders, as the reaction to the revelation could easily spiral out of control in unforeseeable ways.

And the damage was done.

A lot of the work of intelligence services is, if not cooperative, then transactional. “I have some information you would like,” says an ally to us, “and we’ll pass it along to you in exchange for something we need.” That favor might be us passing information back to them on another subject, or supporting some foreign policy objective. That favor might be immediate, or something later. Among the Five Eyes nations (US, UK, Australia, New Zealand, and Canada) and the major NATO allies, that relationship was formalized into regular practice.

But now, with Trump’s first foray into intelligence matters, all these countries worried about passing things along that under previous administration they never would have hesitated to share. With good reason.

Fast forward four years, past all the bizarre meetings with Russia where notes were not taken, past the stunning press conference in Helsinki where Trump declared he trusted Putin’s word over the word of his own intelligence services, past all the coddling of authoritarians, past all the threats to withdraw from NATO, past all the insults to our allies around the world . . . Fast forward past all of that, and there came November 2020. On the Sunday after the election, when Biden was declared the president-elect and foreign leaders began to offer their congratulations, the New York Times discussed the deeper reactions of European leaders to Biden’s election:

David O’Sullivan, former European Union ambassador to the United States, said he looked forward to a renewal of American leadership — if not the hegemony of the past, then at least “America’s role as the convening nation” for multilateral initiatives and institutions.

But the world has changed, and so has the United States, where the Biden victory was relatively narrow and not an obvious repudiation of Mr. Trump’s policies. A fundamental trust has been broken, and many European diplomats and experts believe that U.S. foreign policy is no longer bipartisan, so is no longer reliable.

Biden, with his decades of experience with foreign policy, knew this was true, which meant that two of his most critical appointments would be his Secretary of State and his CIA Director. For State, he chose Anthony Blinken, who had served in the State Department under President Clinton and on the White House national security staff in both the Clinton and Obama administrations, and for CIA he chose William Burns.

Burns was not a product of the intelligence community. He was a career State Department diplomat, but not just any diplomat. From 2001 to 2005, as the US reacted to the attacks on 9/11, Burns was the Assistant Secretary of State for Near Eastern Affairs — that is, the Middle East. From 2005 until 2008, as Vladimir Putin tightened his hold of the office of President of Russia following the chaos of the Yeltsin era, Burns was the US Ambassador to Russia. From 2008 to 2011, Burns held the position of Undersecretary of State for Political Affairs – the #4 position at State and the highest office reserved for a career foreign service officer. By the end of his 32 year tenure, he held the rank of Career Ambassador – the State Department’s equivalent to a four-star general.

Beyond running the CIA, the new director had to rebuild all those broken international relationships and restore that “fundamental trust” between the US and the world. That’s what made Burns such a great choice.

When the National Archives discovered classified information had not been turned over when Trump left office, they brought the news to the DOJ. I have this vision of Garland swallowing hard, and then arranging a meeting with Burns, DNI Victoria Nuland Avril Haines [corrected], and the other US intelligence agency heads to let them know what Trump had done. I can see the shock on their faces, followed by the “of course he did” sighs of resignation. Then the wheels start turning as each tries to figure out how this affects their agency.

But I also imagine Burns, either in the meeting or in a private conversation, telling Garland one thing: “I have no doubts about your department and your passion for justice. If there is anything I can do to assist, just let me know. I won’t press you to share things with me that you shouldn’t share — you do your job and I’ll do mine. But there’s one thing you need to know. You may already know it, but let me reinforce it. The. Whole. World. Is. Watching. Our allies are just beginning to trust us again, and how you handle this will determine whether that continues or is blown to bits. From a foreign policy perspective, especially on the intelligence side, we *have* to get this right.” That’s total fantasy on my part, but I’m reasonably confident that something like that was communicated, one way or another.

Two days ago, when the search was first revealed, Garry Kasparov tweeted, “For those who live where the law exists only to serve the powerful and oppress the rest–as I did in the USSR and Putin’s Russia–the dictum that no one is above the law is nearly awe-inspiring.”

The American legal community is watching this all unfold very carefully, with an eye toward all the minutia of the various legal questions at issue. The US political folks on every side are watching this carefully, with an eye toward the midterms and 2024. US media organizations are watching this carefully, trying to figure out how to cover the story. Ordinary Americans are watching this carefully, for all kinds of reasons.

And beyond our borders, the whole world is watching, as that Kasparov tweet indicates. It shows that Garland is reaching that worldwide audience, even before the word “nuclear” became part of the story.

In his long-ago testimony before Congress about that “perfect phone call,” Alexander Vindman captured in three words the essence of US foreign policy, and he repeated them as a hashtag in that tweet above. In the actions of the DOJ this past week, Garland is giving Vindman a big “Amen.”

Russia, if you’re listening, listen to Vindman. #HereRightMatters indeed.

I know we’ve got a fair chunk of readers outside the US, and I’d love to hear in the comments what you all are seeing in the coverage your countries.