Posts

The Visibility of FBI’s Close Hold: John Durham Will Blame Michael Sussmann that FBI Told Alfa Bank They Were Investigating

Thanks to those who’ve donated to help defray the costs of trial transcripts. Your generosity has funded the expected costs of transcripts. But if you appreciate the kind of coverage no one else is offering, we’re still happy to accept donations. This coverage reflects the culmination of eight months work. 

According to an exchange at the end of they day yesterday, John Durham’s team plans to introduce “a hundred” exhibits through their paralegal acting as a summary witness today.

My understanding is that the defense objects to the PowerPoint presentation style of the process. But, again, we think it just streamlines it in terms of — the alternative is to have to put literally a hundred exhibits in through Ms. Arsenault one at a time.

Given the exhibits from Monday, I assume Durham will throw a bunch of Fusion documents at the jury in an attempt to insinuate, once again, that Michael Sussmann shared with the press that the FBI was investigating the Alfa Bank anomaly.

The coming onslaught of Fusion documents

I say that because Mark Hosenball wrote the FBI for comment at 1:33PM on October 5, 2016, attaching the Mediafire package, asking for comment and noting that, “it has been suggested to me that this information and scenario is under careful investigation by the FBI.”

Hosenball’s email to the FBI puts it right at the beginning (in red, below) of the known universe of Fusion emails we’ve seen from that day, the timestamps of which Durham has repeatedly tried to obscure. (Maybe while paralegal Kori Arsenault is on the stand, Sussmann’s team can ask her why Durham’s exhibits misleadingly don’t correct for UTC.)

That said, there’s still a Hosenball email unaccounted for in which he shared one of the publicly available links to Tea Leaves packaged data. It’s quite possible that email precedes Seago’s question to Fritsch, which is currently the earliest email in the list, asking whether one of the i2p sites hosting the data was safe. See this post for background.

5:23PM (likely 1:23?): Seago to Fritsch, Is this safe?

1:31PM: [not included] Fritsch to Hosenball email with Alfa Group overview

1:32PM: Fritsch sends Isikoff the September 1, 2016 Alfa Group overview (full report included in unsealed exhibit)

1:33PM: Hosenball to FBI, “careful investigation by the FBI”

1:33PM [not included] Fritsch to Hosenball, “that memo is OTR — tho all open source”

1:35/1:36PM: Hosenball replies, “yep got it, but is that from you all or from the outside computer experts?”

1:37PM: Fritsch responds,

the DNS stuff? not us at all

outside computer experts

we did put up an alfa memo unrelated to all this

1:38PM: [not included] Hosenball to Fritsch:

is the alfa attachment you just sent me experts or yours ? also is there additional data posted by the experts ? all I have found is the summary I sent you and a chart… [my emphasis]

1:41PM: [not included] Fritsch to Hosenball:

alfa was something we did unrelated to this. i sent you what we have BUT it gives you a tutanota address to leave questions.  1. Leave questions at: [email protected]

1:41PM: [not included] Hosenball to Fritsch:

yes I have emailed tuta and they have responded but haven’t sent me any new links yet. but I am pressing. but have you downloaded more data from them ?

1:43PM: [not included] Fritsch to Hosenball, “no”

1:44PM: Fritsch to Lichtblau:

fyi found this published on web … and downloaded it. super interesting in context of our discussions

[mediafire link] [my emphasis]

2:23PM: [not included] Lichtblau to Fritsch, “thanks. where did this come from?”

2:27PM: [not included] Hosenball to Fritsch:

tuta sent me this guidance

[snip]

Since I am technically hopeless I have asked our techie person to try to get into this. But here is the raw info in case you get there first. Chrs mh

2:32PM: Fritsch to Lichtblau:

no idea. our tech maven says it was first posted via reddit. i see it has a tutanota contact — so someone anonymous and encrypted. so it’s either someone real who has real info or one of donald’s 400 pounders. the de vos stuff looks rank to me … weird

6:33PM (likely 2:33PM): Fwd Alfa Fritsch to Seago

6:57PM (like 2:57PM): Re alfa Seago to Fritsch

7:02PM (likely 3:02): Re alfa Seago to Fritsch

3:27PM: [not included] Fritsch to Hosenball cc Simpson: “All same stuff”

3:58PM: [not included] Hosenball to Fritsch, asking, “so the trumpies just sent me the explanation below; how do I get behind it?”

4:28PM: [not included] Fritsch to Hosenball, “not easily, alas”

4:32PM: Fritsch to Hosenball, cc Simpson:

Though first step is to send that explanation to the source who posted this stuff. I understand the trump explanations can be refuted.

So I assume that Durham will argue that Fusion must have passed on the information that the FBI was investigating — and they may have! (though none of the currently public emails reflect that — and suggest that was all part of Michael Sussmann’s devious plan on September 19.

When, under threat of prosecution, an attempt to prevent politicization turns into an attempt to hide political bias

That’s where things will get interesting. One key dispute in this case is why one keeps secrets. Durham wants to argue that keeping secrets can only serve a political purpose.

Sussmann will argue that keeping secrets facilitates national security interests.

Sussmann will show that everyone at the FBI recognized the value, to the FBI, of stalling a newspaper article about a potentially important threat so the FBI could covertly investigate it. All the more so during election season when — investigation after investigation into the Russian investigation has shown — the FBI was, if anything, being too careful in an attempt to avoid impacting Trump’s political fortunes, even while Jim Comey was tanking Hillary’s campaign. According to Sussmann’s own sworn testimony — testimony that Durham didn’t bother testing before charging Sussmann — allowing the FBI the opportunity to do that was the reason Sussmann shared the Alfa Bank anomaly with the FBI. Durham wants to imprison Sussmann for giving the FBI that heads up, arguing that because he hid his purported clients, it led the FBI to open a Full Investigation more quickly than they otherwise would have (even though, as Sussmann’s team has demonstrated, the FBI did nothing that would have required a Full Investigation in the short period during which they investigated).

A key part of that story Durham wants to tell — needs to tell, given all the evidence that the FBI perceived this to be a DNC-related tip — is that some of his key villains were attempting to hide the perceived political nature of the tip, rather than ensuring the integrity of the investigation itself (or possibly, but I’m still working on this, protecting the identity of a CHS).

Central to that narrative is the changing testimony of FBI Agent Ryan Gaynor — his stated reasons for refusing to let the case agents in Chicago interview either Sussmann or Georgia Tech professor David Dagon. In an interview on October 30, 2020 (a week after Durham had been granted Special Counsel status), Gaynor explained that he had intervened to make sure agents couldn’t conduct interviews that would have led to a more robust investigation to ensure the integrity of the investigation.

Q. Okay. So you remember telling the government that you believed that the agents in Chicago would have been biased by Mr. Sussmann’s perception of the issue — the source’s perception of the issue if they had interviewed him before they got all of the data and analyzed it?

A. Yes.

Q. Okay. And that’s because, at the time, you believed the DNC was the source of the information itself. Right?

A. That’s because, at the time, I believed that he was a DNC attorney associated with the Democratic party and it would be potentially highly-biasing information.

Q. And you told the government, if you had provided the identity of the DNC as the source of the information, they would have known there was possible political motivation. rignt?

A. I recall that exact statement.

Shortly after he gave this testimony, prosecutors took a break, and told his lawyer they were moving towards treating Gaynor as a subject of, rather than just a witness in, the investigation.

Q. Okay. Well, at or around the time you were talking about passing along the source’s name or not, you took a break in the meeting. Do you remember taking breaks during the meeting?

A. I do.

Q. And do you remember when you broke at that point that the government told your attorney that your own status in the investigation had changed. Do you remember hearing that?

A. So I didn’t hear that, but when my attorney came back in, he advised me that my status was in jeopardy.

After that, Gaynor went back, looked at two sets of scribbled notes (Gaynor, because he remains at FBI, was able to review his notes, unlike a number of other Durham witnesses), and decided that now that he thought about it, Jonathan Moffa had actually instructed him to keep a close hold on Sussmann’s identity. It wasn’t his decision anymore, it was Moffa’s, and the dastardly Peter Strzok was in on it. Once Gaynor testified that way, he became a — to Andew DeFilippis, anyway — credible witness again.

Q. Okay. And when you told the government there was a close hold, were you told that your status changed back to being a witness?

A. At the conclusion of the interview, once I had gone over all of the material that I brought and walked through what I had reconstructed and what I could recollect after doing so, I was informed that my status had changed, yes.

Q. Changed back to being a witness?

A. To a witness, yes.

Q. So you go into meeting one being told you are a witness, telling them you decided not to share the agents’ names among other things. Then you are told you are a subject facing criminal charges, potentially. You come back. You tell them about a close hold, and you go back to being a witness; is that right?

Politico may have been the only outlet that described this fairly shocking testimony.

These conflicting claims about the purported reasons to keep Sussmann’s identity (as opposed to the investigation itself) a secret are important background to that Hosenball email on October 5, which I suspect Durham will use to claim that the Democrats were leaking about the investigation.

Starting almost immediately after getting the investigation, Chicago case agents started asking to interview the source, variously defined to be either Sussmann or the person who wrote the white paper. Gaynor kept pushing the agents to go review the logs again — though the file memorializing the contents of what it describes as a single thumb drive (Sussmann shared two) was not written up until October 4. But then, by October 5 (the same day that Hosenball asked the FBI for comment, albeit this report comes in four hours later), FBI had learned from one of their confidential human sources that David Dagon had a role in the white paper and he — and the FBI’s own source! — would be going public pushing the credibility of the allegations.

In that email, newbie agent Allison Sands explained that they were going to contact Dagon.

So, among other things, on the same day Hosenball writes in reflecting an awareness that there was an ongoing investigation, the FBI hears from a CHS who says he or she has already been talking with David Dagon and was going public backing the claims (though this source was speaking to the WaPo, not Reuters).

Note that, as of that date, the FBI still hadn’t received logs from Listrak.

By the time Allison Sands wrote that email, it appears from Lync messages that like others probably haven’t been noticed to reflect UTC time zone, had already contacted Rodney Joffe’s handler to contact Dagon.

Fun with missing Bates stamps

Side note. There are actually two versions of the notes that purportedly caused Gaynor to change his mind about there being a close hold and on what source that close hold was on. There’s Defense Exhibit 524, which has a slew of Bates stamps, and 7 redactions.

And then there’s a page from Government Exhibit 279, which appears between a page with Bates stamp SC-6454 and one with Bates stamp SC-6456, which has no Bates stamp at all (and lacks the protective order stamp that appears on the other pages of the exhibit).

That version of the exhibit has just four redactions, one of which is smaller. The unredacted bits on the exhibit reveal discussions of the informant and recognition that the statements of the informant “likely triggered” the press attention.

Incidentally, Durham’s team took an entire day to upload this set of exhibits. I’m wondering if the exhibit that was viewed by Gaynor and entered into evidence actually looked like this one does.

Calling the agent of a foreign agent to ask for comment

There’s one other thing going on. On the stand, Gaynor spent a great deal of time explaining about how important it was to hide an investigation — particularly from anyone who might have a partisan interest — during an election.

Except for all the talk of a close hold, the FBI wasn’t holding this very close. They were stomping around to a bunch of sources asking for data logs, even before they had checked what was on (one of) the thumb drives that Sussmann had dropped off. They fairly demonstrably were stomping around before they understood what they should be looking for.

They also were calling Mandiant, which was working for Alfa Bank, which by October 19 when they were formally interviewed discovered Alfa Bank had no logs, but which knew of the investigation by October 5.

Q. Uh-huh. You testified about the reasons why you’d want to keep it covert, you wouldn’t want to do anything that could affect the election so close to the election. Right?

A. Yes.

Q. The FBI, as part of the Alfa-Bank investigation, talked to a number of different individuals outside of the FBI to acquire information, to get you information so that you could investigate the allegations. Right?

A. Yes.

Q. Okay. You spoke to people at Central Dynamics?

A. Yes, and I believe the investigative team documented in the email that I saw that they had done it in a manner to attempt to avoid it outing the allegation.

[snip]

A. I’m sorry?

Q. And how is that that they could conduct an interview with a third party in a way that the third party wouldn’t tell other people about it?

A. They described it in a manner that they had obfuscated what their direct interest was.

Q. So from the Central Dynamics’ perspective, they didn’t know what you were looking at?

A. That is what I had in the email chain, yes. n

Q. But you testified that the FBI interviewed Mandiant as part of the investigation. Correct?

A. Yes. My understanding there is that was a private liaison relationship that occurred.

Q. Mandiant — just to be clear — Alfa-Bank itself hired Mandiant to analyze whether there was a secret communications channel. Correct?

A. Yes.

Q. So Alfa-Bank paid Mandiant to look into whether there was a secret communications channel. Right?

A. Yes.

Q. And Alfa-Bank obviously had a relationship with Mandiant that was put at issue by hiring Mandiant. Right?

A. Yes.

Q. Okay. So the FBI went to Alfa-Bank’s paid consultant and asked them for their view on the allegation. Correct?

A. I believe the FBI had a prior relationship with one of the employees, and they utilized that in the field. Plus, I don’t think the Bureau would violate policy on a sensitive investigative matter when the Chief Division Counsel of the office is involved. So I would assume that they did that in a manner that they did not feel would be alerting or go to the media.

Q. Mr. Gaynor, the FBI in this investigation went to Alfa-Bank’s paid consultant and asked them for their views of the allegations. correct?

A. Yes.

Q. And Alfa-Bank’s paid consultant could have told Alfa-Bank. Correct?

A. Yes.

Q. And could have told the press for all you know. Correct?

A. Yes. And I don’t know how Chicago mitigated that.

Q. And is it your testimony that going to Alfa-Bank, the Russian bank that is the focus of this investigation, and asking their paid consultant for their views on the matter wasn’t going to overt?

A. Again, I don’t know how Chicago mitigated that issue.

[snip]

Q. Did you ever have a conversation with anybody at headquarters about whether to provide the names of the source to the Chicago agents?

A. Yes. There was a conversation about the close hold, as I mentioned, although it wasn’t correctly, I guess, documented between Pete Strzok, myself and Mr. Moffa at some point during that time period.

[snip]

Q. And the reason that you say no one talked to him is because, as of that point, October 6th, you had already concluded that there was nothing to these allegations. Right?

A. As of October 5th, evening of October 5th, we had come to a pretty solid conclusion that these allegations did not have merit and there wasn’t a national security threat.

Q. Are you aware that the agents first interviewed Alfa-Bank’s paid consultant, Mandiant, merely two weeks later on October 19th?

A. So I’m aware that we had information from Mandiant as of October 5th that they had looked at this allegation and found that it didn’t have merit. And then I’m also aware that there was an interview that was conducted later, October 19th or so, when I was made aware of it, yes.

A text between Allison Sands and Scott Hellman reflects the FBI had contact with Alfa Bank by October 4.

It appears that contact occurred in London — a place where Mark Hosenball has strong source ties since the time in 1976 when he got expelled for reporting on Northern Ireland.

In other words, Gaynor’s currently operative stance is that case agents couldn’t contact David Dagon — much less Rodney Joffe, who had business ties with the FBI — to find out what was going on, because that would present a conflict.

But it was okay for the FBI to contact the agent of the subject of the investigation overtly.

Agent Gaynor belatedly rediscovers the Mediafire package

Incidentally, when that original request for comment from Hosenball came in, it got transferred to people in the cyber division, then shared with the investigative team. In response, the senior-most person on that team sent it to Peter Strzok. Strzok forwarded it, at 3:02 on October 5, to Ryan Gaynor.

On October 13, just over a week after he had originally received it, Gaynor sent the Mediafire package to the case team, noting that the observations in it reflected actions taken in response to their investigation, but asking for their technical opinion.

He included Moffa and Joe Pientka on that email.

But not Strzok, who knew he had received it 8 days earlier.

OTHER SUSSMANN TRIAL COVERAGE

Scene-Setter for the Sussmann Trial, Part One: The Elements of the Offense

Scene-Setter for the Sussmann Trial, Part Two: The Witnesses

The Founding Fantasy of Durham’s Prosecution of Michael Sussmann: Hillary’s Successful October Surprise

With a Much-Anticipated Fusion GPS Witness, Andrew DeFilippis Bangs the Table

John Durham’s Lies with Metadata

emptywheel’s Continuing Obsession with Sticky Notes, Michael Sussmann Trial Edition

Brittain Shaw’s Privileged Attempt to Misrepresent Eric Lichtblau’s Privilege

The Methodology of Andrew DeFilippis’ Elaborate Plot to Break Judge Cooper’s Rules

Jim Baker’s Tweet and the Recidivist Foreign Influence Cheater

That Clinton Tweet Could Lead To a Mistrial (or Reversal on Appeal)

John Durham Is Prosecuting Michael Sussmann for Sharing a Tip on Now-Sanctioned Alfa Bank

Apprehension and Dread with Bates Stamps: The Case of Jim Baker’s Missing Jencks Production

Technical Exhibits, Michael Sussmann Trial

Jim Baker’s “Doctored” Memory Forgot the Meeting He Had Immediately After His Michael Sussmann Meeting

The FBI Believed Michael Sussmann Was Working for the DNC … Until Andrew DeFilippis Coached Them to Believe Otherwise

Fun with Bates Stamps, Part One: John Durham Confuses His Two Defendants to Rile Up the Frothers

Before I look at what newly disclosed notes from March 6, 2017 (written by Tashina GausharMary McCord, and Scott Schools) reveal about the Crossfire Hurricane investigation, including that Carter Page’s FISA was “fruitful,” which will pose Durham some difficulties in the Igor Danchenko investigation, I want to do two posts having some fun with Bates stamps.

Bates stamps are the way that lawyers track the documents they shuffle around in discovery. Every page of a document should be stamped sequentially to show the document’s chain of custody; the numbers also make referring to such documents in court filings easier. Just as one not-at-all random example of how it is supposed to work, this January 31, 2017 document John Durham obtained from the CIA shows three Bates stamps.

We can’t really be entirely sure what chain of custody this shows. Perhaps CIA stamped the outgoing files with  “CIA-0000019” and DOJ stamped the incoming CIA file, “DOJ_REQ_0242039.” We know, however, that Durham’s stamp is “SC-00081634.” Because Bates stamps are sequential, they help us to understand the order in which certain documents are handled.

One thing Bates stamps show us is that John Durham got approval to use a bunch of mostly-irrelevant Fusion GPS exhibits and did not get approval for the ones he actually wants to use at Michael Sussmann’s trial.

Because his team is made up of professionals, along with his objections to Durham’s exhibits, Michael Sussmann included a list that tied the exhibit numbers Durham assigned to the Bates stamps of the documents in question. That allows us to compare what exhibits Durham used to get Judge Christopher Cooper to buy off on submitting Fusion GPS documents with the jury with the Bates numbers of the Fusion GPS documents he really wants to introduce (thanks to William Ockham for doing a lot of this work).

A comparison of what Durham accidentally-on-purpose published to the docket with what Durham actually wants to introduce at trial shows that, of 62 pages of exhibits, he has identified just the following as exhibits at trial:

  • SC-00082558[-559]: July 31, 2015 email between Jake Berkowitz, Tom Hamburger, and Glenn Simpson re: Carter Page and Walid Phares
  • SC-00100359[-361]: September 24 through 27, 2016 email thread including Eric Lichtblau, Glenn Simpson, and Peter Fritsch on open source claim regarding Sergei Millian having a tie to Alfa Bank
  • SC-00027527[-541]: October 5, 2016 email from Fritsch to Isikoff sharing Alfa Group overview
  • SC-00027501: October 5, 2016 email from Fritsch to Lichtblau sharing link sent by Mark Hosenball claiming, “found this published on the web”
  • SC-00027483: October 5, 2016 email from Fritsch to Lichtblau claiming he had “no idea” where the link had come from
  • SC-00027475[-76]: October 5, 2016 exchange between Hosenball and Fritsch about how to respond to Trump statement on Tea Leaves’ allegations
  • SC-00027309: October 18, 2016 Fritsch email suggesting that Hosenball “call David Dagon at Georgia Tech”
  • SC-00027283: October 31, 2016 exchange between Isikoff and Fritsch about “big story on trump Alfa server moving early pm”
  • SC-00027233: November 3, 2016 blank response from Fritsch to Lichtblau regarding request about Sergei Millian

Just the last one, which I’ve bolded, has an assigned exhibit number in Durham’s list, suggesting either that he wants to use the documents with witnesses but not let the jury review the documents or that he’s not all that serious about using the documents as exhibits.

The list enables a tremendous amount of fuckery and more possible depending on how dishonest Durham wants to be.

For example, Durham has not obviously included the email where Mark Hosenball sent the link to the mediafire package to Fusion GPS, even though all the emails strongly support that’s what happened. Thus, as laid out, Durham seems intent to mislead the jury into believing that Fusion got that link via Tea Leaves or Michael Sussmann directly and not, as they’ve explained, via a journalist.

As noted, there are places where the list Sussmann included only the first page of a series. Given the way Durham is treating serial October 5, 2016 emails (most notably those involving Eric Lichtblau), it’s possible he does not intend to include follow-on pages in his exhibits. In several cases, that would leave out important context.

For example, in the October 5, 2016 thread between Fritsch and Hosenball, including just the first page of that exhibit would leave out where Fritsch said,

the DNS stuff? not us at all.

outside computer experts

we did up an alfa memo unrelated to all this

It would also leave out where Fritsch pointed Hosenball to the public tutanota email included at the link that Hosenball himself sent to Fritsch, another piece of evidence showing that this was not an internal operation.

That is, as described, Durham may plan to falsely suggest these efforts were more closely tied than the evidence shows (it might exclude, for example, a key piece of evidence that Judge Cooper pointed to that showed this wasn’t a grand conspiracy).

Similarly, if just the first page of these exhibits were to come in, it would mean the jury got to see that Fusion sent out their Alfa Bank report, but not read the Alfa Bank report itself. Certainly, Durham could credibly argue that including the report would be prejudicial and as such might distract the jury. But excluding the report would also deprive the jury of the only material shared with the FBI that non-experts would have the ability of assessing themselves, both for the quality of the research and the validity of concerns of alleged ties between Trump and Alfa Bank.

For example, the report describes Richard Burt’s publicly acknowledged role in Trump’s first speech (though not a later role discovered as part of the Mueller investigation).

Burt has acknowledged that he played a significant role in writing Trump’s first major foreign policy speech. “I was asked to provide a draft for that speech. And parts of that of my draft —- survived into the final,” he told NPR.”‘

In the April 27 “America First” speech, Trump laid out an isolationist foreign policy. He criticized NATO and promised he would pursue better relations with Russia– skipping over its invasions of its neighbors and human rights abuses?’

It describes several allegations of Alfa Bank’s involvement in spying on adversaries.

Diligence also investigated a reporter from The Vail Street ournal who had contacted the CPI regarding the Alfa libel case. Private investigators for Diligence conducted a trash-stealing operation against the personal residence of the journalist. The operation was eventually exposed by an insider at Diligence. The affair caused high-level consternation in Washington due to a bizarre snafu: Unknown to the Diligence investigators, the reporter had vacated his home and rented it to a top White House official. That led to a confidential national security investigation of possible espionage by Alfa.

It even notes Petr Aven’s close ties to Putin, ties that Putin would exploit within months of the report in an attempt to form a back channel with the Trump Administration (though I suspect Putin did this in part to fulfill these suspicions).

As the face of Alfa Bank, Peter Aven remains the group’s key interface with the Kremlin. It appears his importance has only grown. Alfa Group, and specifically Alfa Bank, have a longstanding presence in the US and the UK.

[snip]

It is clear that Aven remains the key political figure in Alfa Group, with multiple current links to the government and security services, as outlined above. He has also driven the development of international links through the expansion of Alfa Bank in the US and Europe. The bank has carried out careful outreach, running an international Alfa Fellows program and maintaining a high profile. Although not itself a target, the bank has suffered from sanctions however, and has a particular interest in lifting sanctions’.

There’s a lot of crap that came from Fusion GPS, but their straight Russian research held up pretty well, and this is an example why it was reasonable for Perkins Coie to hire Fusion. So while Durham might successfully argue that this would be prejudicial, it is also one of the best ways for the jury to assess the credibility of Perkins Coie’s basis for relying on Fusion. It’s also necessary to explain why Michael Sussmann and Rodney Joffe might believe sharing this material with the FBI pertained to national security, not political malice.

Perhaps the most alarming detail in what Durham included in his exhibit list is that last one, the only one that includes an actual exhibit number.

Durham has made much of the fact that Lichtblau sent an email to Peter Fritsch asking if he had told him (at an in-person meeting) that Sergei Millian had an Alfa email address. As included here as an exhibit, Durham would present this without context, insinuating that Fritsch learned of this via Joffe or someone.

But the actual email thread — exchanged in September, when Lichtblau was in the thick of trying to publish this story — makes it clear that Fusion formed this inference based off entirely public ip information, research entirely unrelated to the DNS allegations.

So as laid out here, Durham has allowed for a good deal of at least possible fuckery.

But then there’s the question of what emails he did present to Judge Cooper claiming he wanted to use as exhibits.

The vast majority of these emails are entirely unrelated to the case against Sussmann. Many of the emails, though, might be related to Igor Danchenko’s case. They pertain to publicly sourced concerns about Sergei Millian, concerns shared far outside of Fusion, as well as to open source research on Carter Page. They do seem to reflect knowledge of a single Christopher Steele report, but at a time before Rodney Joffe first met anyone at Fusion GPS.

Meanwhile, in addition to the emails over which the Democrats or Rodney Joffe have claimed privilege, there are around another 35 that aren’t privileged but which Durham didn’t include in his exhibit of the emails that, he claimed, he wanted to rely on at trial.

In other words, those emails were utterly useless as an exhibit to allow Judge Cooper a good way to assess the exhibits that Durham actually wants to use at trial. They were, however, really useful at riling up the frothers.

The fact that Durham included many emails he doesn’t want to use as exhibits, but didn’t include many emails (including unprivileged ones) that he wants to use as exhibits, including all but one of the ones to which he has assigned an exhibit number, makes it all the more curious that Durham “accidentally” posted these emails publicly to the docket and the unpublished them.

In any case, it’s still possible this fuckery will blow up at trial (assuming that Durham doesn’t find some reason to make an interlocutory appeal, which I think is likely). As Judge Cooper noted in his order regarding motions in limine, “The Court will reserve judgment as to the admissibility of any additional email it has not yet seen.”

Hillary Clinton’s Devious Plot to Get Oleg Deripaska to Install Paul Manafort as Trump’s Campaign Manager

Out of curiosity and a good deal of masochism, I listened to the latest podcast of “The Corner,” the frothy right wingers who spend their time spinning conspiracy theories about the Durham investigation.

It was painful.

At every step, these men simply assert evidence must exist — like a Democratic order to bring dirt to the FBI — for which there’s no evidence. They ignore really basic facts, such as that Sussmann was necessarily working with the FBI because his client was being systematically hacked, and therefore it wasn’t just Christopher Steele who had ongoing ties to the Bureau. They make a huge deal about the fact that the US government’s Russian experts know each other, and that Christopher Steele persistently reported on topics — like Rosneft — that really were and are important to British and US national security and on which he had legitimate expertise.

They’re already starting to make excuses for Durham (such as that Durham chose not to obtain privileged emails the same way Mueller and SDNY did, without noting that Mueller had probable cause of a crime, which Durham admits he does not, much less that Mueller got them in a different way and a different time then they believe he did).

They keep making much of the coincidence of key dates in 2016 — “We continue to have a very, very tight timeline that that accelerates” — but never mention either the WikiLeaks dump of the DNC emails or Trump’s request that Russia hack Hillary some more, a request that was followed closely by a new wave of attacks. Those two events in July 2016 explain most of the actions Democrats took in that period, and these men don’t even exhibit awareness (or perhaps the belief?) that the events happened.

Worse still, they are ignorant of, or misrepresent, key details.

For example, all but Hans Mahncke assert that John Brennan must have been acting on some kind of corrupt intelligence in July 2016, rather than real intelligence collected from real Russian sources. They do so even though Billy Barr described in his book bitching at Trump after Trump complained that Durham found that, “the CIA stayed in its lane in the run-up to the [2016] election.”

Emblematic of the fraying relationship between the President and me was a sharp exchange at the end of the summer in the Oval Office. To give the President credit, he never asked about the substance of the investigation but just asked pointedly when there might be some sign of progress. On this occasion, we had met on something else, but at the end he complained that the investigation had been dragging on a long time. I explained that Durham did not get the Horowitz report until the end of 2019, and up till then had been look- ing at questions, like any possible CIA role, that had to be run down but did not pan out.

“What do you mean, they didn’t pan out?” the President snapped.

“As far as we can tell, the CIA stayed in its lane in the run-up to the election,” I said.

The President bristled. “You buy that bullshit, Bill?” he snarled. “Everyone knows Brennan was right in the middle of this.”

I lost it and answered in a sarcastic tone. “Well, if you know what happened, Mr. President, I am all ears. Maybe we are wasting time do- ing an investigation. Maybe all the armchair quarterbacks telling you they have all the evidence can come in and enlighten us.”

Durham looked for this evidence for years. It’s not there (and therefore the intelligence Brennan viewed is something other than the dossier or even the Russian intelligence product that the frothers also spin conspiracies on).

All but Fool Nelson misrepresent a July 26, 2016 email from Peter Fritsch to WSJ reporter Jay Solomon, which says, “call adam schiff, or difi for that matter. i bet they are concerned about what page was doing other than giving a speech over 3 days in moscow,” suggesting that that must be proof the top Democrats on the Intelligence Committees had the Steele dossier, rather than proof that it was a concern to see an advisor to a Presidential campaign traveling to Russian and saying the things Page was saying. (Jeff Carlson makes the same complaint about former Ambassador to Russia Michael McFaul’s observations about something that all experienced Russia watchers believed was alarming in real time.)

They get the evidence against Carter Page wrong, among other ways by misstating that all his time in Moscow had been accounted for and that the rumor he met with Igor Sechin was ever entirely debunked. “Of course it’s impossible. He was chaperoned. He had a hotel. He had a driver. Without people noticing.” For example, the son of the guy who brought Page to Russia, Yuval Weber, told the FBI that they weren’t with Page 100% of the time and there was a rumor that he had met with Sechin.

In July, when Page had traveled to give the commencement speech at NES, Weber recalled that it was rumored in Moscow that Page met with Igor Sechin. Weber said that Moscow is filled with gossip and people in Moscow were interested in Page being there. It was known that a campaign official was there.

Page may have briefly met with Arkady Dvorkovich at the commencement speech, considering Dvorkovich was on the board at NES. But Weber was not aware of any special meeting.

[redacted] was not with Page 100% of the time, he met him for dinner, attended the first public presentation, but missed the commencement speech. They had a few other interactions. Page was very busy on this trip.

This testimony was consistent with Mueller’s conclusion about Page’s trip: given boasts he made to the campaign, “Page’s activities in Russia — as described in his emails with the Campaign — were not fully explained.”

They badly misrepresent emails between a handful of journalists and Fusion GPS, spinning real skepticism exhibited by journalists as journalists somehow conspiring with Fusion. Indeed, they repeatedly point to an email from WaPo’s Tom Hamburger pushing back on the Sechin claim, “That Page met with Sechin or Ivanov. ‘Its bullshit. Impossible,’ said one of our Moscow sources.” They claim that Hamburger nevertheless reported the story after that. They’re probably thinking of this story, which reported Page’s 2014 pro-Sechin comments, not that he had met with the man in 2016.

After the Obama administration added Rosneft Chairman Igor Sechin to its sanctions list in 2014, limiting Sechin’s ability to travel to the United States or do business with U.S. firms, Page praised the former deputy prime minister, considered one of Putin’s closest allies over the past 25 years. “Sechin has done more to advance U.S.-Russian relations than any individual in or out of government from either side of the Atlantic over the past decade,” Page wrote.

In other words, they’re claiming journalists doing actual journalism and not reporting what Fusion fed them is somehow corrupt, when it is instead an example, among many, of failed attempts by Fusion to get journalists to run with their tips.

They complain that Fusion was pointing journalists to Felix Sater, in spite of the fact that Sater really was central to tying Trump Organization to Russian funding and really did pitch an impossibly lucrative real estate deal in the year before the campaign that involved secret communications with the Kremlin and sanctioned banks and a former GRU officer, a deal that Michael Cohen and Trump affirmatively lied to cover up for years.

They grossly misrepresent a long text to Peter Strzok reflecting someone else’s early inquiries on the DNS allegation to Cendyn, imagining (the redaction notwithstanding) that it reflects the FBI concluding already at that point that there was nothing to the DNS allegations and not that the FBI inquiry instead explains why Trump changed its own DNS records shortly thereafter (addressing one but not both of the questions raised by NYT reporting).

Obviously, none of them seem interested in the nearly-contemporaneous text from Strzok noting that “Russians back on DNC,” presumably reflecting knowledge of the serial Russian effort to steal Hillary’s analytics stored on an AWS server, a hack that — because it involved an AWS server, not a DNC-owned one — not only defies all the favorite right wing claims about what went into the Russian attribution, but also explains why Sussmann would be so concerned about seeming evidence of ongoing covert communication between Trump and a Russian bank. The Russians kept hacking, both in response to Trump’s request in July, and in the days before and after Sussmann met with James Baker in September.

Crazier still, none of these men seem to have any understanding of two details of the back-and-forth between Sussmann, the FBI, and NYT, one that is utterly central to the case against Sussmann. They conflate a request FBI made to NYT days after Sussmann’s meeting with the FBI to kill the story — one made with the assent of Sussmann and Rodney Joffe — with later follow-up reporting by the NYT reporting that the FBI had not substantiated the DNS allegation. Those were at least two separate calls! Durham had chased down none of them before he indicted Sussmann. It wasn’t until almost six months after charging Sussmann that Durham corroborated Sussmann’s HPSCI testimony that Sussmann and Joffe agreed to help kill the initial NYT story, which provides a lot of weight to Sussmann’s explanation for his meeting with James Baker, that he wanted to give the FBI an opportunity to investigate the allegation before the press reported on it. As a result, Mahncke states as fact that Sussmann’s September 18 text telling Baker, “I’m coming on my own – not on behalf of a client or company – want to help the Bureau,” (even ignoring the temporal problem it creates for Durham’s charge) proves Sussmann lied, when in fact, his and Joffe’s efforts to help the Bureau kill the story strongly supports Sussmann’s public story.

If you don’t know that Sussmann and Joffe helped the FBI to kill what would have been a damning story about Trump, you’re not assessing the actual evidence against Sussmann as opposed to Durham’s conspiracy theories.

All that said, laying out all the ways the supposed experts on the frothy right prove they’re unfamiliar with the most basic details about events in 2016 and since is not why I wrote this post.

I wrote this post because of the way Fool attempted to explain away the inconvenience of Paul Manafort to his narrative. Fool went on at length showing how (a possible Russian fabrication claiming) Hillary’s plan to focus on Trump’s ties to Russia must have predicated an investigation that started before that point. He ignored, entirely, that an FBI investigation had already been opened on Page by then (and all four frothers ignore that Fusion started focusing on Page when Paul Singer was footing the bill). But Fool does acknowledge that the money laundering investigation into Manafort had already been opened before Crossfire Hurricane started. He treats Manafort’s very real corrupt ties to Putin-backed oligarchs as a lucky break for what he imagines to be Hillary’s concocted claims, and not a fact that Trump ignored when he hired the man to work for him “for free.” “Luckily, I don’t know if this was a coincidence or not, Manafort joined the Trump campaign and that gave them a reason to look deeper.” In other words, Fool suggests Manafort’s hiring might be part of Hillary’s devious plot, and not the devious plot of Oleg Deripaska to get an entrée to Trump’s campaign or the devious alleged plot of Mohammed bin Zayed to direct Trump policy through Tom Barrack.

Because I expect the circumstances of Manafort’s hiring may become newsworthy again in the near future and because Deripaska was pushing an FBI investigation into Manafort before Hillary was, I wanted to correct this detail.

According to Gates, the effort to install Manafort as campaign manager started earlier than most people realize, in January 2016, not March.

In January 2016, Gates was working mostly on [redacted] film project. Gates was also doing some work on films with [redacted] looking for new DMP clients, and helping Manafort pull material together to pitch Donald Trump on becoming campaign manager. Roger Stone and Tom Barrack were acting as liaisons between Manafort and Trump in an effort to get Manafort hired by the campaign. Barrack had a good relationship with Ivanka Trump.

Tom Barrack described to Mueller how Manafort asked for his help getting hired on Trump’s campaign in that same month, January 2016.

But Manafort may have started on this plan even before January 2016. Sam Patten told SSCI Kilimnik knew of the plan in advance. Patten’s explanation of his involvement in the Mueller investigation describes Ukrainian Oligarch Serhiy Lyovochkin asking him about it in late 2015.

In late 2015, Lyovochkin asked me whether it was true that Trump was going to hire Manafort to run his campaign. Just as I told Pinchuk that Putin’s perception of America’s capabilities was ridiculous, I told Lyovochkin that was an absurd notion; that Trump would have to be nuts to do such a thing.

In any case, even before his hiring was public, on March 20, Manafort wrote his Ukrainian and Russian backers to let them know he had installed himself with the Trump campaign. He sent one of those letters to Oleg Deripaska, purportedly as a way to get the lawsuit Deripaska had filed against Manafort dropped.

Gates was shown an email between Gates and Kilimnik dated March 20, 2016 and four letters which were attached to this email. Gates stated he was the person who drafted the letters on Manafort’s behalf. Manafort reviewed and approved the letters.

Manafort wanted Gates to draft letters announcing he had joined the Trump Campaign. Manafort thought the letters would help DMP get paid by OB and possibly help confirm that Deripaska had dropped his lawsuit against Manafort. Manafort wanted Kilimnik to let Deripaska know he had been hired by Trump and he needed to make sure there were not lawsuits against him.

Gates was asked why Manafort could not have employed counsel to find out of the Deripaska lawsuit had been dropped. Gates stated Manafort wanted to send Deripaska a personal note and to get a direct answer from Deripaska. Gates also thought this letter was a bit of “bravado on Manafort’s part.”

Gates was asked if the purpose of the letter to Deripaska was to determine if the lawsuit had been dropped, why didn’t the letter mention the lawsuit. Gates stated that Manafort did not want to put anything about the lawsuit in writing.

This explanation, true or not (and it’s pretty clear the FBI didn’t believe it), is critical to the frothers because even before Christopher Steele started collecting information on Trump, he was collecting information on Manafort at the behest of Deripaska in conjunction with this lawsuit. And Steele was feeding DOJ tips about Deripaska’s lawsuit before he started feeding the FBI dirt paid for by Hillary’s campaign. The first meeting at which Steele shared dossier information with Bruce Ohr, for example, Steele also pushed the Deripaska lawsuit, and not for the first time.

Either the Deripaska lawsuit was a cover story Manafort used consistently for years (including through his “cooperation” with Mueller in 2018), or it was real. Whichever it was, it bespeaks some kind of involvement by Deripaska long before Hillary got involved. Viewed from that perspective, the dossier (and Deripaska’s presumed success at filling it with disinformation) was just part of a brutal double game that Deripaska was playing with Manafort, one that led Manafort to share campaign strategy and participate in carving up Ukraine, another event the frothers are trying to blame on the ever-devious Hillary. Whichever it is, the process by which a bunch of Putin allies in Ukraine knew Trump was going to hire Manafort before Trump did is a big part of the story.

But according to the frothers, Hillary Clinton is just that devious that she orchestrated all of this.

John Durham’s Irregular Now-Sealed Timeline

As I noted here, John Durham claimed to attempt to file a bunch of confidential Fusion emails under seal.

Whether intentionally or not, he failed, at first, but has now closed the barn doors after voluntarily publishing damning evidence (much of it true!) against the purported victims he claims to be avenging.

By publishing these emails on the docket, Durham has revealed that his exhibit has irregularities in the emails pertaining to a key issue: whether Fusion sent out a link to April Lorenzen’s i2p site before Mark Hosenball sent it to them.

This shows up in the timestamps. In the exhibit, the lead email for each appearance appears to be set to UTC, whereas the sent emails included in any thread appear to be set to ET.

For example, in this screencap, the time shown for Mark Hosenball’s response to Peter Fritsch (the pink rectangle) is 1:35 PM, which is presumably Eastern Time.

In this screencap, the very same response appears to be sent at 5:36PM, which is presumably UTC.

Both instances of Peter Fritsch’s email (the green rectangle), “that memo is OTR–tho all open source,” show at 1:33PM, again, Eastern Time.

To be clear: this irregularity likely stems from Fusion’s email system, not DOJ’s. It appears that the email being provided itself is rendered in UTC, while all the underlying emails are rendered in the actual received time.

But given that these emails are being submitted to Judge Cooper in regards to a privilege claim, the fact that DOJ has made no effort to fix — or at least call attention to — the anomaly, it makes the exhibit affirmatively misleading with regards to perhaps the most important detail in the exhibit.

As I note in the timeline below, this obscures the order in which Fusion received and passed on a link to the mediafire package introducing Tea Leaves’ DNS allegation package — precisely the issue (and, it is now clear, the specific communication) about which Alfa Bank had confusion in their lawsuit. I explained the import of these communications here.

Given the selection of emails included here (not even all from this time period  are included as primary emails, which is what makes the anomaly misleading, and one involving Mark Hosenball — in the italicized email, he references having sent a summary to Fritsch —  appears to be entirely missing), Fusion’s public explanation — that they received this link and then passed it on — cannot be proven or disproven. But it is clear that after Fritsch got the mediafire link, he sent it to Lichtblau, which I’ve bolded below. And by context, it appears that Laura Seago had already figured out that the mediafire package was first posted on Reddit.

(I’ll have to check but given what Perloth told me, this may not actually be how NYT first got this data.)

Update, May 19: I’ve added emails from trial.

October 5 emails:

1:31PM: [not included] Fritsch to Hosenball email with Alfa Group overview

1:32PM: Fritsch sends Isikoff the September 1, 2016 Alfa Group overview (full report included in unsealed exhibit)

1:33PM [not included] Fritsch to Hosenball, “that memo is OTR — tho all open source”

1:35/1:36PM: Hosenball replies, “yep got it, but is that from you all or from the outside computer experts?”

1:37PM: Fritsch responds,

the DNS stuff? not us at all

outside computer experts

we did put up an alfa memo unrelated to all this

1:38PM: [not included] Hosenball to Fritsch:

is the alfa attachment you just sent me experts or yours ? also is there additional data posted by the experts ? all I have found is the summary I sent you and a chart… [my emphasis]

1:41PM: [not included] Fritsch to Hosenball:

alfa was something we did unrelated to this. i sent you what we have BUT it gives you a tutanota address to leave questions.  1. Leave questions at: [email protected]

1:41PM: [not included] Hosenball to Fritsch:

yes I have emailed tuta and they have responded but haven’t sent me any new links yet. but I am pressing. but have you downloaded more data from them ?

1:43PM: [not included] Fritsch to Hosenball, “no”

1:44PM: Fritsch to Lichtblau:

fyi found this published on web … and downloaded it. super interesting in context of our discussions

[mediafire link] [my emphasis]

2:23PM: [not included] Lichtblau to Fritsch, “thanks. where did this come from?”

2:27PM: [not included] Hosenball to Fritsch:

tuta sent me this guidance

[snip]

Since I am technically hopeless I have asked our techie person to try to get into this. But here is the raw info in case you get there first. Chrs mh

2:32PM: Fritsch to Lichtblau:

no idea. our tech maven says it was first posted via reddit. i see it has a tutanota contact — so someone anonymous and encrypted. so it’s either someone real who has real info or one of donald’s 400 pounders. the de vos stuff looks rank to me … weird

3:27PM: [not included] Fritsch to Hosenball cc Simpson: “All same stuff”

3:58PM: [not included] Hosenball to Fritsch, asking, “so the trumpies just sent me the explanation below; how do I get behind it?”

4:28PM: [not included] Fritsch to Hosenball, “not easily, alas”

4:32PM: Fritsch to Hosenball, cc Simpson:

Though first step is to send that explanation to the source who posted this stuff. I understand the trump explanations can be refuted.

5:23PM (could be 1:23?): Seago to Fritsch, Is this safe?

6:33PM (likely 2:33PM): Fwd Alfa

6:57PM (like 2:57PM): Re Alfa

7:02PM (likely 3:02): Seago to Fritsch re Alfa

“Not Us at All:” In His Bid to Pierce Privilege, John Durham Makes Strong Case for Immunizing Rodney Joffe

The folks in John Durham’s Office of Conspiracy-Mongering seem to be frazzled. What other explanation might they have for a positively hysterical entry in their bid to pierce Democrats’ privilege claims?

To be clear (because frothy lawyers are making false claims about what I think might happen), I think some of the privilege claims being made are suspect. Durham might succeed, in part, and a more professional effort to do so in a different case — say, Igor Danchenko’s — might get the results he wanted.

But last night’s filing, even ignoring that Durham released confidential emails while purportedly asking permission to release them under seal, was a clown show.

Start with what Durham doesn’t mention.

In Michael Sussmann’s opposition to Durham’s motion to compel, he raised four procedural problems with Durham’s effort.

First, the Special Counsel’s Motion is untimely. Despite knowing for months, and in some cases for at least a year, that the non-parties were withholding material as privileged, he chose to file this Motion barely a month before trial—long after the grand jury returned an Indictment and after Court-ordered discovery deadlines had come and gone.

Second, the Special Counsel’s Motion should have been brought before the Chief Judge of the District Court during the pendency of the grand jury investigation, as the rules of this District and precedent make clear.

Third, the Special Counsel has seemingly abused the grand jury in order to obtain the documents redacted for privilege that he now challenges. He has admitted to using grand jury subpoenas to obtain these documents for use at Mr. Sussmann’s trial, even though Mr. Sussmann had been indicted at the time he issued the grand jury subpoenas and even though the law flatly forbids prosecutors from using grand jury subpoenas to obtain trial discovery. The proper remedy for such abuse of the grand jury is suppression of the documents.

Fourth, the Special Counsel seeks documents that are irrelevant on their face. Such documents do not bear on the narrow charge in this case, and vitiating privilege for the purpose of admitting these irrelevant documents would materially impair Mr. Sussmann’s ability to prepare for his trial.

While Durham makes unconvincing attempts to address the first and fourth issue (to which I’ll return), he doesn’t meaningfully address the second and third. In this post, I opined that the third — his blatant abuse of grand jury rules — could be easily addressed (which he didn’t try to do), but given how obviously irrelevant and potentially inadmissible these documents are to the charge against Sussmann, I’m not so sure anymore.

But Durham only addresses Sussmann’s argument that he ignored local rules and deliberately bypassed Beryl Howell, who would have been the proper person to assess these privilege claims, by making unconvincing claims he made a good faith effort to do so directly.

There’s another thing he doesn’t mention, another point Sussmann raised. Some of the emails Durham is focused on make it explicit that there was a separation between Fusion’s research (including the Steele dossier) and the DNS research.

The Special Counsel makes much of the fact that (1) there was an August 11, 2016 email exchange between Mr. Sussmann, Mr. Elias, and Fusion employees with the subject “connecting you all by email” and (2) that thereafter, Fusion employees “began to exchange drafts of a document . . . the defendant would provide to the FBI General Counsel.” Motion ¶¶ 29, 30. But in seeking to draw inflammatory and unsupported inferences, the Special Counsel ignores another email—that he produced in discovery—in which a Fusion employee stated that the document was “an [A]lfa memo unrelated to all [the Alfa Bank DNS information].” See Email from P. Fritsch to M. Hosenball (Oct. 5, 2016), SC-00027475, at SC-00027476.

Indeed, Peter Fritsch told Mark Hosenball that “the DNS stuff” was “not us at all.”

Even though Sussmann pointed that out, Durham did not address the clear evidence in his possession that this was not a joint effort. Other of these communications, Peter Fritsch has testified under oath, he engaged in because he was independently alarmed about the Alfa Bank allegations. And some of them, Fusion has noted before, derived from Paul Singer’s involvement in the project and Singer didn’t invoke privilege.

Much of rest, though, is primarily focused on Carter Page and Sergei Millian (though in one place, Durham also downplays that Fusion was investigating Felix Sater, which is interesting given Durham’s efforts to pretend the notion Trump had multiple back channels with Russia is malicious and political). Indeed, included emails explain that what had been a potentially scandalous reference — the allegation that Millian had an email “with” Alfa Bank — actually came from public Internet research, not from the DNS analysis.

Given the focus on Millian, though, it is inexplicable why Durham is trying to pierce these privilege claims here rather than in the case where it might matter, Danchenko’s. Rather, I can think of some explanations, such as that someone in Millian’s organization viewed the obligation to register under FARA as a “problem” as early as 2013, but none of them are legally sound.

The far more interesting aspect of Durham’s filing comes in how he addresses two substantive issues. First, here’s how he addressed the timing of his belated decision to try to pierce privilege.

As an initial matter, the defendant and others accuse the Government of carrying out an untimely “full frontal assault” on the attorney client privilege by raising these issues more than a month before trial. (Def. Opp. at 1.) But those characterizations distort reality. Indeed, the opposite is true: the primary reason the Government waited until recently to bring these issues to the Court’s attention was because it wanted to carefully pursue and exhaust all collaborative avenues of resolving these matters short of litigation. The Government did so to avoid bringing a challenge to the parties’ privilege determinations and to ensure that it first gathered all relevant facts and provided the relevant privilege holders with notice and an opportunity to explain the bases for their privilege assertions. Even the emails between the Government and counsel that the defendant quotes in his opposition reflect this very purpose. See., e.g., Def. Opp. at 7 (quoting emails in which the Special Counsel’s Office stated that it “wanted to give all parties involved the opportunity to weigh in before we. . . seek relief from the Court” and requested a call “to avoid filing motions with the Court.”).

In addition, over the course of months, and until recently, the Government has been receiving voluminous rolling productions of documents and privilege logs from numerous parties. The Government carefully analyzed such productions in order assess and re-assess the potential legal theories that might support the parties’ various privilege assertions. In connection with that process, the Special Counsel’s Office reached out to each of those parties’ counsel numerous times, directing their attention to specific documents where possible and communicating over email and phone in an effort to obtain non-privileged explanations for the relevant privilege determinations.2 The Government also supplied multiple counsel with relevant caselaw and pointed them to documents and information in the public domain that it believed bore on these issues. The Government was transparent at every step of these discussions in stating that it was contemplating seeking the Court’s intervention and guidance. Unfortunately, despite the Government’s best efforts and numerous phone calls, it was not able to obtain meaningful, substantive explanations to support these continuing broad assertions of privilege and/or work product protections. [my emphasis]

This flips a point Sussmann made on its head — that Durham kept prodding Sussmann to waive privilege. “[T]he Special Counsel has been asking Mr. Sussmann whether there would be any waiver of privilege in this case because of his concern that a privilege waiver at this stage in the proceedings would fundamentally impact the course of trial.”

Durham provides no dates on his claimed efforts to resolve the privilege issues. But Sussmann has already revealed what some of those dates are. The two Durham cites were in August.

Email from Andrew DeFilippis, Dep’t of Just., to Patrick Stokes, Gibson, Dunn & Crutcher LLP, et al. (Aug. 9, 2021) (requesting a call to discuss privilege issues with a hope “to avoid filing motions with the Court”); Email from Andrew DeFilippis, Dep’t of Just., to Patrick Stokes, Gibson, Dunn & Crutcher LLP, et al. (Aug. 14, 2021) (stating that the Special Counsel “wanted to give all parties involved the opportunity to weigh in before we . . . pursue particular legal process, or seek relief from the Court”). And since January— before the deadline to produce unclassified discovery had passed—the Special Counsel suggested that such a filing was imminent, telling the DNC, for example, that he was “contemplating a public court filing in the near term.” Email from Andrew DeFilippis, Dep’t of Just., to Shawn Crowley, Kaplan Hecker & Fink LLP (Jan. 17, 2022).

2 In response to these inquiries and discussions, Tech Executive-1’s counsel withdrew his client’s privilege assertions over a small number of documents, and Fusion GPS produced a redacted version of its retention agreement with Perkins Coie. [my emphasis]

August is when Durham should have been involving Chief Judge Howell. Instead, we’re in April, and Durham is only now involving Judge Christopher Cooper. Importantly, using the dates Sussmann decided to include but which Durham did not, Durham was talking about taking imminent action in January, over two months before he first raised piercing privilege. After that, Durham again nudged Sussmann to waive privilege on his own. And the only reason why Durham was still getting responses to subpoenas, to the extent he was, is because he subpoenaed some of this after indicting (again, which he doesn’t address).

Given Durham’s claims he was trying to use other methods to get this information, his explanation of why he “only recently” decided he needed to pierce privilege is utterly damning: He only recently decided he needed to immunize Laura Seago and call her as a witness, he says.

It was only recently, when the Government determined it would need to call an employee of Fusion GPS as a trial witness (the “Fusion Witness”), that the Government concluded these issues could not be resolved without the Court’s attention. Because all or nearly all of the Fusion Witness’s expected testimony on these matters concern work carried out under an arrangement that the privilege holders now contend was established for the purpose of providing legal advice, it is essential to resolve the parties’ potential disputes about the appropriate bounds of such testimony (and the redaction or withholding of related documents).

That’s utterly damning because one of the last two things Alfa Bank was pursuing in their John Doe lawsuits before they were sanctioned, on Thursday, February 10, was to revisit privilege claims made by Fusion in a September Seago deposition with Alfa Bank (Seago’s first interview, in March 2021, was abandoned quickly). The reason Alfa gave for needing to challenge privilege claims Seago made in a 4-hour September deposition at which she invoked privilege over 60 times was because, “people at Fusion are speaking with the likes of Rodney Joffe.” And before Associate Judge Heidi Pasachow could rule, Alfa Bank was sanctioned to prevent it from helping Russia to attack democracy.

As I’ve laid out, all of Durham’s missed deadlines came after he could no longer rely on Alfa Bank to do his dirty work. As did, by his own description, the belated decision that he needs to immunize Seago and get her to testify at trial.

And that’s important because in spite of the pages and pages of irrelevant emails, when Durham turns to make the case that he needs to pierce this privilege, he again turns to Seago, claiming that she has “unique” knowledge about the charges against Sussmann.

Where a party seeks to overcome work product protection, it must show either that “it has a substantial need for the materials to prepare its case and cannot, without undue hardship obtain their substantial equivalent by other means” for fact work product, or make an “extraordinary showing of necessity” to obtain opinion work product. Boehringer, 778 F.3d at 153 (D.C. Cir. 2015) (quotations omitted).

Here, the vast majority of the relevant materials likely constitute fact work product, given that few of the communications involve an attorney. In addition, the Government has met both prongs of the relevant test. First, the Government has a “substantial need” for materials that it has requested the Court to review in camera. Those materials include, for example, communications between Tech Executive-1 and the Fusion Witness whom the Government will call at trial. The Fusion Witness is, to the Government’s knowledge, the only Fusion GPS employee who exchanged emails with Tech Executive-1 concerning the Russian Bank-1 allegations (or any other issue). The Fusion Witness also (i) acted as the firm’s primary “technical” expert; (ii) worked for an extended time period on issues relating to the Russian Bank-1 allegations; (iii) was a part of the team that handled work under Fusion’s contract with HFA and the DNC; and (iv) met in 2016 with various parties – including Law Firm-1, Tech Executive-1, and the media – about the Russian Bank-1 allegations. As such, the Fusion Witness undoubtedly possesses unique insight to the core issue to be decided by the jury—i.e., whether the defendant was acting on behalf of one or more clients when he worked on the Russian Bank-1 allegations. Accordingly, the Government has a “substantial need” to obtain the Fusion Witness’s communications relating to the Russian Bank-1 allegations. Moreover, the materials for which the Government has requested in camera review also include internal Fusion GPS communications regarding one of the three white papers that the defendant provided to the FBI, namely, the “[Russian Bank-1’s parent company] Overview” paper. Communications regarding the origins and background the very Fusion GPS paper that the defendant brought to the FBI are therefore likely to shed unique light on the defendant’s meeting with the FBI General Counsel, including the defendant’s work on behalf of his clients. Fusion GPS’s communications regarding that paper in the days prior to the defendant’s meeting with the FBI General Counsel are also likely to reveal information about the paper’s intended purpose and audience. Such facts will, again, shed critical light on the defendant’s conduct and meeting with the FBI.

Second, the Government cannot “without undue hardship obtain the[] substantial equivalent” of these materials “by other means.” Boehringer Ingelheim Pharms., Inc., 778 F.3d at 153. That is because these materials constitute mostly internal Fusion GPS communications and, accordingly, are not available from any other source. To the extent these communications reflect emails with Tech Executive-1, they are similarly unavailable because Tech Executive-1 has invoked his Fifth Amendment right against self-incrimination. Therefore, obtaining the materials or their substantial equivalent from another source would not merely present an “undue hardship,” but rather, is impossible. [my emphasis]

This is a fairly astonishing argument.

That’s because Seago’s knowledge of the communications she had with Joffe is not unique. Joffe also has knowledge of their communications. To get Seago’s testimony, Durham plans to immunize her.

Yet he says he can’t get the very same testimony from Joffe because Joffe would invoke the Fifth.

Durham has an obvious alternative, and it just so happens to be the alternative that Sussmann is also seeking: To immunize not Seago, but Joffe. That would be more beneficial for Durham, if he really wants that testimony, because Joffe can waive privilege over precisely these communications and enter them as evidence with no hearsay exception. Immunizing Joffe gives Durham everything he wants and his testimony would be unquestionably pertinent to the charge against Sussmann.

Just twelve days ago, John Durham argued that he’s not playing fast-and-loose with his immunity decisions and that Joffe would offer no testimony useful to Sussmann (though to do so, Durham misrepresented Sussmann’s statement about Joffe’s role in helping to kill the NYT story).

Indeed, to now arbitrarily force the Government to immunize Tech Executive-1 merely because the defense believes he would offer arguably helpful testimony to the defendant would run afoul of the law and inject the Court into matters plainly reserved to the Executive Branch.

[snip]

(The Government also currently intends to seek immunity at trial for an individual who was employed at the U.S. Investigative Firm. But unlike Tech Executive-1, that individual is considered a “witness” and not a “subject” of the Government’s investigation based on currently-known facts.)

Finally, the defendant fails to plausibly allege – nor could he – that the Government here has “deliberately denied immunity for the purpose of withholding exculpatory evidence and gaining a tactical advantage through such manipulation.” Ebbers, 458 F. 3d at 119 (internal citation and quotations omitted). The defendant’s motion proffers that Tech Executive-1 would offer exculpatory testimony regarding his attorney-client relationship with the defendant, including that Tech Executive-1 agreed that the defendant should convey the Russian Bank-1 allegations to help the government, not to “benefit” Tech Executive-1. But that testimony would – if true – arguably contradict and potentially incriminate the defendant based on his sworn testimony to Congress in December 2017, in which he expressly stated that he provided the allegations to the FBI on behalf of an un-named client (namely, Tech Executive-1). And in any event, even if the defendant and his client did not seek specifically to “benefit” Tech Executive-1 through his actions, that still would not render his statement to the FBI General Counsel true. Regardless of who benefited or might have benefited from the defendant’s meeting, the fact still remains that the defendant conducted that meeting on behalf of (i) Tech Executive-1 (who assembled the allegations and requested that the defendant disseminate them) and (ii) the Clinton Campaign (which the defendant billed for some or all of his work). The proffered testimony is therefore not exculpatory, and certainly not sufficiently exculpatory to render the Government’s decision not to seek immunity for Tech Executive-1 misconduct or an abuse.6

6 The defendant’s further proffer that Tech Executive-1 would testify that (i) the defendant contacted Tech Executive-1 about sharing the name of a newspaper with the FBI General Counsel, (ii) Tech Executive-1 and his associates believed in good faith the Russian Bank-1 allegations, and (iii) Tech Executive-1 was not acting at the direction of the Clinton Campaign, are far from exculpatory. Indeed, even assuming that all of those things were true, the defendant still would have materially misled the FBI in stating that he was not acting on behalf of any client when, in fact, he was acting at Tech Executive-1’s direction and billing the Clinton Campaign.

Now, he’s claiming that the only possible way he can get testimony pertaining to Seago’s communications with Joffe is to immunize Seago and breach both Joffe’s and the Democrats’ claims of privilege.

By far the easiest way of solving this issue — and the one that meets Sussmann’s due process rights — is instead to immunize Joffe.

It’s a great case Durham made that they should cede to Sussmann’s request and immunize Joffe!

We’ll see what Cooper thinks of these claims at the status hearing tomorrow (because the hearing is in person, it’s unclear whether I’ll be able to call in).

But what is clear is that Durham keeps presenting evidence that he’s looking in the wrong place for the evidence he says he needs.

The Alfa Bank Dark Net at Noon

Before its John Doe nuisance lawsuits got shut down by Vladimir Putin’s invasion of Ukraine, Alfa Bank made several claims that led me to chase down a minor – but potentially important – part of the Alfa Bank story.
Someone totally uninvolved in the Michael Sussman/Fusion/April Lorenzen effort played a role in making their efforts public in 2016: “Phil,” the guy about whom I went to the FBI in 2017. As I told the FBI, I suspected he had played a role in the Guccifer 2.0 and Shadow Brokers operations.

This post will focus on what Alfa Bank got wrong. A follow-up post will look at why, if John Durham made the same error, it may matter for the Michael Sussmann case.

Someone exposes Tea Leaves’ research via Krypt3ia

At issue is this post on the eponymously-named InfoSec blog Krypt3ia. As the post describes, someone tipped Krypt3ia off to a WordPress site and a purported i2p site (also called an “eepsite”) that laid out a version of the claims that Michael Sussmann had shared with the FBI and the NYT in September 2016.

Those claims are at the heart of the false statement charge against Sussmann.

Along with the basic allegations about weird DNS look-ups between servers from Alfa Bank and Spectrum Health and a Trump marketing server, those sites also revealed that after the NYT called Alfa Bank for comment about the DNS anomaly in September 2016, the Trump DNS address changed. This is the digital equivalent of someone changing their phone number after discovering they were being surveilled. The seeming response by Trump to the NYT call to Alfa for comment has always been regarded as the smoking gun showing human acknowledgement of the communications (a report from Alfa Bank attempted, unpersuasively, to contest that).

By connecting to a Russian-hosted proxy service, the Krypt3ia post about all this added an element of Russian mystery to the story. But that’s it. The post offered no other new content.

The Krypt3ia post is more important for the function it played than its content. Krypt3ia’s post served to make the contents of a publicly available but difficult to find i2p site – believed to be created by data scientist April Lorenzen, but written under the pseudonym Tea Leaves – accessible.

In response to tips from source(s) of his, Krypt3ia focused attention on a series of communications, none tied in his post to a then-identified person. First, someone alerted him to the WordPress site. That site spoke of Tea Leaves as a third person; there was never a pretense that it was Tea Leaves or Lorenzen. Krypt3ia learned of that WordPress site because someone approached Krypt3ia, purportedly asking for help finding an incomplete i2p address listed in the post.

I caught wind of the site when someone asked me to look at an i2p address that they couldn’t figure out and once I began to read the sites [sic] claims I thought this would be an interesting post.

That tip led Krypt3ia to find what was actually a proxy allowing access to a real i2p site – the one that injected an air of Russian mystery to the story.

First off, the i2p address in the WordPress site is wrong from the start. Once I dug around I found that the real address was gdd.i2p.xyz which is actually a site hosted on a server in Moscow on Marosnet.

That led Krypt3ia to ask whether anyone at NYT wanted to verify the claim that Trump Organization seemingly took action after NYT called Alfa.

I also have to wonder about this whole allegation that a NYT reporter asked about this.

Say, any of you NYT’s people out there care to respond?

Ask and you shall receive! Someone–as I lay out below, I have confirmed that this was “Phil”–put Krypt3ia in touch with a NYT reporter.

First off, someone in my feed put me in touch with the NYT and a reporter has confirmed to me that what the site says about NYT reaching out and asking about the connections, then the connections going bye bye is in fact true.

[snip]

The biggest takeaway is that the NYT confirmed that they asked the question and shit happened. They are still looking into it.

In an update, someone purporting to be Tea Leaves responded to Krypt3ia via an untraceable Tutanota email account, and in response, Krypt3ia posed a bunch of questions, only to get no answer. That non-answer was a key reason why Krypt3ia later treated the allegations as a fraud – an opinion that Alfa Bank, at least, used to bolster their own claims of fraud.

As Krypt3ia mused in real time, it seemed that the entire point of the tips he was receiving was focusing attention on the allegations themselves. Except, if your goal was to release a story that might swing an election, it was a really weird way of doing so.

One does wonder though just who might be trying this tac to attempt to cause Donny trouble. It seems a half assed attempt at best or perhaps they were not finished with it yet.. But then why the tip off email to someone who then got in touch with me? Someone I spoke to about this alluded to maybe that was the plan, for me to blog about this from the start..

[snip]

I have to say it though, these guys are trying to get the word out but in a strange way. I mean this eepsite is now hosted in Czechoslovakia, staying with the Baltic flavor but why not broadcast this more openly? Why does the WordPress site have the wrong address to start and then the other eepsite disappears after a little poking and prodding?

There are at least four unattributed or unattributable communications that appeared in this post: an email to someone who, in turn, got in touch with Krypt3ia; a tip about the WordPress site (presumably from the person who got the email) and through it to the i2p gateway; the contact with the unnamed NYT reporter; and the email from someone claiming to be Tea Leaves via a service that made it impossible to prove it was the person who originally adopted that pseudonym.

Notably, this all happened between October 5, 2016 – before the Podesta drop and the DHS attribution of the DNC hack to Russia – and the days after it. Krypt3ia was checking out the i2p proxy on October 7, at 3:08PM ET – less than half an hour before DHS would release an unprecedented attribution statement, followed shortly by the Access Hollywood video, followed shortly by the first Podesta email drop. Krypt3ia wrote his post the following day.

i2p sites aren’t supposed to get noticed

To understand why using Krypt3ia to get noticed is so weird, you need to understand a little about i2p.

i2p is a network like Tor that provides obscurity and security. Even today, it’s far less accessible than Tor (and was even more so in 2016). Krypt3ia could credibly access it, but I couldn’t have. Reporter Eric Lichtblau or Fusion GPS’ Laura Seago probably couldn’t have either. Normally you need either a special browser or a gateway to to access an eepsite. Importantly, the public DNS routing information that was at the heart of the project that discovered the Alfa Bank anomalies doesn’t exist for i2p. You can’t just Google for a site.

If data scientist April Lorenzen put her research on an i2p site, as alleged, she may have done so to limit who noticed it and her role in it.

It didn’t work out that way.

(Note, because the Durham investigation remains ongoing, I am not contacting her or her lawyers for comment or others who are obviously still the focus of Durham’s investigation.)

Krypt3ia didn’t link directly to her i2p site at first. He started by linking a gateway, which would be accessible to mere mortals who don’t have an i2p browser or technical prowess. His second link may have been a different gateway – again, a link readily accessible to people without using special software. It was one of these links that got sent around by journalists and researchers.

That’s what I mean about content versus function: Krypt3ia added no new content to this story. He did, however, make parts of it accessible to people – like reporters – who would otherwise never have found it.

A comment purportedly from Lorenzen sent to Krypt3ia’s site, playing on Tea Leaves’ name, expressed (or feigned) surprise at finding what the email called a mirror (but which was a proxy).

Thank you to https://krypt3ia .wordpress.com for pointing out a possible mirror of this (the original, what you are reading, http://gdd.i2p). We did not know about gdd.i2p.xyz until hearing about it from Krypt3ia. So we did a little research and see that i2p.xyz has been around for years and appears to mirror a lot of *.i2p sites. *i2p.xyz probably functions as an alternative for everybody that doesn’t have the skills to reach an i2p site :)

Next question, why would somebody first mirror – and then drop their mirror – of our http://gdd.i2p website. The following is just speculation: maybe normally i2p.xyz just mirrors everything but oops! Something hot – drop the mirror. I don’t know. I didn’t try to visit it. Mirrors of course could choose to alter content and measure who visits. We have no such opportunity to see who is visiting our real i2p site.

Whoever wrote the email, it emphasized how the proxy was different from the “real i2p site:” The proxy “functions as an alternative for everybody who that doesn’t have the skills to reach an i2p site,” but it also can “measure who visits” whereas a “real i2p site” cannot.

Whatever the story behind the Krypt3ia post, it had the effect of making it clear that researchers who believed they could find hackers by looking at public DNS data couldn’t hide what they were doing, even on networks designed to be untrackable. It had the effect of making it clear their efforts to look for Russian hackers in DNS data had been seen.

Alfa Bank alleges the Krypt3ia notice is part of an imagined conspiracy targeting the bank

It also appears to have convinced Alfa Bank that Krypt3ia was a key cog in the publication of this story. Their lawsuit claimed that,

The scientists and researchers who obtained the nonpublic DNS data deliberately leaked portions of that data to other scientists and researchers and, ultimately, to the media.

Depositions in the Alfa Bank lawsuit make it clear that Alfa believed (presumably because of those characteristics about i2p) that Fusion GPS must have been behind the effort to alert Krypt3ia to the research site and, via his post, to alert the public.

In a February 10 bid to overcome privilege claims that Fusion GPS’ Laura Seago had previously made, Alfa Bank lawyer Margaret Krawiec argued that Seago must have breached any privilege by sharing information from the publicly posted Tea Leaves information. Krawiec’s logic was that someone internal to the privilege claims asserted by Perkins Coie must have told Seago where the i2p site was, because otherwise there would be no way she could find it.

Krawiec: So, your honor, let me jump in there because one of the things that happened is that we were trying to understand how it was that Ms. Seago knew that this data had been published on the internet because it was published in an obscure place in the internet by this Tea Leaves that I told you about.

And then what Fusion did was – so we asked about that. We said, “How did you know where to look for that data? Who told you?” Cut off, instruction not to answer, privileged. But guess what they did with those links of that data? They took that data that someone told them because no one would have known to find it where it was unless someone told them.

And they wouldn’t tell us who told them or how they found it, but then they took all those links – the supposed public source research – and disseminated it to seven or eight media outlets saying you have to check this out. This is big stuff.

Fusion’s lawyer Joshua Levy countered that the link and the site itself were public.

Levy: If you – if you take the example that Alfa-Bank’s lawyer just presented to the Court, the link that someone at Fusion had circulated to a reporter, that link is a link to the internet. It’s a publicly available link, right?

The link – it’s, it’s like sending a New York Times article to a reporter at the Washington Post. Have you – have you seen this article? You should look at it. It’s interesting. Here’s a link. It happens to do with the subject matter which (indiscernible) is fascinated, [sic] but it’s a publicly available link.

Ms. Seago may have had communications internally at Fusion about that link. Those are privileged communications, but the link itself is available online for the Court, for me, for Ms. Krawiec. It’s public. There’s, there’s nothing confidential about that link.

Alfa’s lawyer responded by arguing that because an i2p site was so difficult to find, Seago’s knowledge of its location must have come from privileged information, and because she subsequently shared a link to a gateway with journalists, she had waived privilege.

Krawiec: Your Honor, I can tell you that where this link was when it was on the internet, you, myself, Mr. Levy, no one could have found that by doing a basic Google search. They were instructed where to find it in this obscure location.

And all we were trying to understand is who instructed them because the person who posted it was Tea Leaves, the anonymous computer scientist who had this computer data.

Alfa’s lawyer argued, not unreasonably, that because Tea Leaves’ site could not have been discovered by a Google search, someone connected to Tea Leaves must have told Fusion where it was, and because Fusion, in turn, shared a link to it, any privilege around Fusion’s discussions about Tea Leaves had therefore been breached.

Alfa’s focus on how Tea Leaves’ i2p site became public continued during a February 14 deposition of Peter Fritsch. In it, Alfa raised an email from Seago to Fritsch describing that Krypt3ia had become aware of Tea Leaves’ work, in response to which questions Fritsch pled the Fifth. By the time Krypt3ia posted, it seems likely, Fusion already knew April Lorenzen was involved.

But in the Seago hearing, Fusion lawyer Joshua Levy stated clearly that, “Our client didn’t move that specific communication –” pushing Tea Leaves’ information (from the context, it’s unclear to me whether this was a link directly to a gateway to Tea Leaves i2p site or one that involved Krypt3ia). Elsewhere Levy explained that Mark Hosenball had sent the link to Fusion which, in turn, sent it out to other journalists.

Fusion’s claims are consistent with them knowing of Lorenzen’s work before the Krypt3ia post, but having nothing to do with the Krypt3ia post and/or public links directly to Lorenzen’s site.

“Phil” hooked Krypt3ia up with the NYT

Alfa Bank seems to doubt Fusion’s denials that they were behind all those levels of notice to Krypt3ia.

I have no idea who first alerted Krypt3ia to the WordPress site or the i2p site, and he says he doesn’t remember who did. I do know who hooked him up with the NYT.

As I noted when I criticized this story in 2016, I was pitched the Alfa Bank story, like the NYT. But unlike the NYT, I was not pitched it by the people Durham is trying to put in jail like Sussmann, the researchers, or Fusion GPS. I was pitched it by the guy whom I’ve referred to by the pseudonym “Phil,” the person I went to the FBI about in 2017. (This is a pseudonym and he has not been charged by DOJ.)

Not only did he pitch me on it, but he told me he was the one to have hooked Krypt3ia up with the NYT reporter.

The rest of our exchange is below…

The claim that Phil had introduced Krypt3ia to a NYT reporter was credible. At the time I knew of several NYT reporters he claimed to have ties to (at Phil’s request, I had introduced him to one of them, and I’ve confirmed his contacts with others since). He also publicly interacted with Krypt3ia on Twitter.

But I had never checked whether Phil had really introduced the NYT to Krypt3ia until the Alfa Bank filing that blamed that tie on Fusion.

Nicole Perloth has confirmed it was Phil. As she described, Phil basically pushed Krypt3ia on her. “Nicole: Krypt is a person who can be an invaluable resource on this,” specifically addressing Krypt3ia‘s expertise on the dark web, even while asking her to keep him (Phil) updated on when the story would be published.

When I asked Krypt3ia if it was possible that the same person alerted him to the i2p site as had connected him to a NYT journalist, he said he did not remember.

Do you know if the person who connected you with the NYT reporter was the same was the one who pointed out the mirror? As per your post? Or don’t you remember?

Honestly don’t remember. Did not take notes or anything, thought it all bullshit and some kind of game of disinformation.

Whether or not Phil had a role in first tipping Krypt3ia off to the i2p proxy, he had a role in making the NYT aware of a series of moving versions of that site, starting with the one in Russia.

Importantly, this is not the only attempt to broker these allegations that remains publicly unexplained. There’s another unexplained package of these allegations – a “mediafire” package first posted on Reddit – raised in the Alfa suit that Fusion disclaimed credit for.

At least one person pushing this story was (as far as I know) completely unrelated to the efforts Durham and Alfa have focused on. Given that April Lorenzen used a pseudonym for her efforts, it would have been easy to hijack those efforts. So until April Lorenzen certifies that all the communications posted under the name “Tea Leaves” out there are hers (including the comment attached to a Tutanota email in Krypt3ia’s post), neither should anyone assume she’s responsible for all of them.

Alfa Bank believed that the public notice of the Tea Leaves i2p site was proof that Fusion, and only Fusion, was dealing these allegations. The opposite is the case.

To be sure: that might have mattered if Vladimir Putin’s invasion hadn’t killed the Alfa Bank lawsuit. But Phil’s role in the Krypt3ia post doesn’t much matter to the Sussmann indictment. Sussmann’s alleged lie was on September 19, 2016, 16 days before the communications leading to the Krypt3ia post started. Nothing Phil did on October 8 and thereafter, it seems, could affect that alleged lie.

That said, Durham’s sprawling single-count indictment does include allegations about Sussmann’s outreach to the press that post-dates Phil’s involvement and may rely on it. Most notably, a paragraph describing that Sussmann emailed Lichtblau on October 10 encouraging him to send an opinion piece criticizing the NYT for its Trump coverage mentions that, “At or around that time, and according to public sources, [Lichtblau] was working on an article concerning the [Alfa Bank] allegations, but [Lichtblau’s] editors at [NYT] had not yet authorized publication of the article.” [my emphasis] Krypt3ia’s comment, “the NYT confirmed that they asked the question and shit happened. They are still looking into it” – a comment that indirectly involved Phil – is one of those public sources.

At the time, Phil was pushing a NYT article more aggressively than what Durham describes Sussmann doing, and he played at least some role in the public sources that reported NYT was working on an article.

So Phil’s involvement adds an important detail about how these claims were made public in the weeks leading up to the election, but none of that changes whether or not Sussmann lied to cover up Hillary and/or Rodney Joffe’s role in all this.

Update: I’ve corrected the post to reflect that the original site, hosted in Russia, was a proxy, not a mirror. Thanks to @i2p at geti2p.net for the corrections starting in this exchange.

Texts

The following includes all the Signal texts included in the exchange regarding the Alfa Bank DNS anomalies.

Two comments on these texts: I’m not sure what I meant in the text sent on October 9 at 10:51AM. I suspect I mistyped. I suspect I was trying to explain Betsy and Dick DeVos’ traditional role in the Republican party – money – was less urgent to Trump in October 2016 than some kind of credible Republican policy platform. 

I stand by everything else I said in these texts, though admit my observation about the adversity between UAE and Russia turned out to be hilariously and epically wrong, particularly as it pertained to Prince.