Posts

The Black Hole Where SSCI’s Current Understanding of WikiLeaks Is

/40 Comments/in , /by

Four years after it started, the Senate Intelligence Committee continues its investigation into Russia’s 2016 election interference, this week releasing the report on what the Obama Administration could have done better. For a variety of reasons, these reports have been as interesting for their redactions or silences as for what the unredacted bits say.

This latest report is no different.

Putin responded to Obama’s warnings by waggling his nukes

The most interested unredacted bit pertains to Susan Rice’s efforts, scheduled to occur just before ODNI and DHS released their report attributing the hack to Russia, to warn Russia against continuing to tamper in the election. That would place the meeting at just about precisely the moment the Access Hollywood video and Podesta email release happened, a big fuck you even as Obama was trying to do something about the tampering. The meeting also would have occurred during the period when Sergei Kislyak was bitching about FBI efforts to prevent Russia from sending election observers to voting sites.

The description of the meeting between Rice and Kislyak is redacted. But the report does reveal, for the first that I heard, that Russia responded to being warned by raising its nukes.

Approximately a week after the October 7. 2016. meeting, Ambassador Kislyak asked to meet with Ambassador Rice to deliver Putin’s response. The response, as characterized by Ambassador Rice, was “denial and obfuscation,” and “[t]he only thing notable about it is that Putin somehow deemed it necessary to mention the obvious fact that Russia remains a nuclear power.”

This exchange is all the more interesting given that there’s an entirely redacted bullet (on page 37) describing actions that “Russian cyber actors” took after Obama warned Putin. Given that the state and county scanning and the alleged hack of VR Systems shows up, there’s something we either still don’t know about or SSCI continues to hide more details of the VR Systems hack.

The page long post-election response to the election year attack

The longest subsection in a section devoted to describing Obama’s response is redacted (pages 39-41).

Here’s what the timing of the unredacted parts of that section is:

  • A: Expulsion of Russian diplomats (December 29, 2016)
  • B: Modifying the EO and sanctions (December 29, 2016)
  • C: redacted
  • D: Cybersecurity action in the form of the issuance of two technical reports (December 29, 2016 and February 10, 2017)
  • E: Tasking the ICA Report (initiated December 6, 2016; completed December 30, 2016; published January 5 and 6, 2017)
  • F: Protecting election infrastructure (January 5, 2017)

That might suggest that whatever secret action the Obama Administration took happened right in December, with everything else.

John Brennan was proved fucking right

There’s a redacted passage that may undermine the entire premise of the John Durham investigation, which purports to review what agencies, other than FBI, did to lead to an investigation focused on Trump’s campaign. Some reporting suggests Durham is investigating whether CIA tricked FBI into investigating Trump’s flunkies.

But this report describes how, in spite of knowing about related Russian hacks in 2015 and Russia’s habit of leaking information they stole, the IC really wasn’t aware of what was going on until John Brennan got an intelligence tip during the summer of 2016. That intelligence tip was described at length in a WaPo story that resembles this section of the report.

Early last August, an envelope with extraordinary handling restrictions arrived at the White House. Sent by courier from the CIA, it carried “eyes only” instructions that its contents be shown to just four people: President Barack Obama and three senior aides.

Inside was an intelligence bombshell, a report drawn from sourcing deep inside the Russian government that detailed Russian President Vladi­mir Putin’s direct involvement in a cyber campaign to disrupt and discredit the U.S. presidential race.

But it went further. The intelligence captured Putin’s specific instructions on the operation’s audacious objectives — defeat or at least damage the Democratic nominee, Hillary Clinton, and help elect her opponent, Donald Trump.

At that point, the outlines of the Russian assault on the U.S. election were increasingly apparent. Hackers with ties to Russian intelligence services had been rummaging through Democratic Party computer networks, as well as some Republican systems, for more than a year. In July, the FBI had opened an investigation of contacts between Russian officials and Trump associates. And on July 22, nearly 20,000 emails stolen from the Democratic National Committee were dumped online by WikiLeaks.

But at the highest levels of government, among those responsible for managing the crisis, the first moment of true foreboding about Russia’s intentions arrived with that CIA intelligence.

The section in this report is redacted.

Effectively, this report seems to confirm the WaPo reporting (which may have been based off sources close to those who testified to SSCI). It also emphasizes the import of this intelligence. But for this intelligence, the IC may have continued to remain ignorant of Putin’s plans for the operation.

The IC won’t let SSCI share its current understanding of WikiLeaks

But the most interesting redactions pertain to WikiLeaks.

There are four redacted paragraphs describing how hard it was for the IC to come up with a consensus attribution for the hack and leak operation.

Senior administration officials told the Committee that they hesitated to publicly attribute the cyber efforts to Russia m1til they had sufficient information on the penetration of the DNC network and the subsequent disclosure of stolen information via WikiLeaks, DCLeaks, and Guccifer 2.0.

More interesting still, almost the entirety of the page-plus discussion (relying on testimony from Ben Rhodes, Michael Daniel, Paul Selva, Mike Rogers, and others) of why it took so long to understand WikiLeaks remains redacted.

One reference that is unredacted, however, describes WikiLeaks as “coopted.”

This information would be of particular interest as the prosecution of Julian Assange goes forward. That — and the fact that some of this determination, relying as it does on former NSA Director Mike Rogers, appears to rely on NSA information — may be why it remains redacted.

Update: I’ve deleted the remainder of this post. It came from Wyden’s views, not the report itself.

The Republican Party Is No Longer the Party of Personal Responsibility

/261 Comments/in , , /by

In a cynical speech that, if we’re lucky, will be an effort to deescalate militarily by imposing more sanctions on Iran (which is not a good thing but far better than the alternative), Trump just pre-blamed Barack Obama for the failures most experts predict and have correctly predicted will come from Trump’s Iran policy. He suggests, falsely, that the current escalation is the result of Obama’s peace deal, rather than the demonstrable result of his suspension of it.

Iran’s hostilities substantially increased after the foolish Iran nuclear deal was signed in 2013, and they were given $150 billion, not to mention $1.8 billion in cash. Instead of saying “thank you” to the United States, they chanted “death to America.” In fact, they chanted “death to America” the day the agreement was signed.

Then, Iran went on a terror spree, funded by the money from the deal, and created hell in Yemen, Syria, Lebanon, Afghanistan, and Iraq. The missiles fired last night at us and our allies were paid for with the funds made available by the last administration. The regime also greatly tightened the reins on their own country, even recently killing 1,500 people at the many protests that are taking place all throughout Iran.

The very defective JCPOA expires shortly anyway, and gives Iran a clear and quick path to nuclear breakout. Iran must abandon its nuclear ambitions and end its support for terrorism. The time has come for the United Kingdom, Germany, France, Russia, and China to recognize this reality.

I’ll leave it to others to unpack how dishonest this claim, both with respect to what JCPOA did and what has led to the increase in tension since Trump reversed our commitment to it.

But it exists in a larger context in which the Trump’s supporters are both refusing to take responsibility for their own actions, including but not limited to their support for Trump, but also doing so by pre-blaming Democrats.

This has been going on for the entirety of the Trump Administration (indeed, arguably it has been going on for at least 15 years). But with respect to Iran, it has consisted of:

  • Blaming Obama’s successful peace deal for the effects of Trump’s own rejection of it
  • Claiming Trump couldn’t brief Democrats on the Soleimani assassination because otherwise they would leak
  • Suggesting that Democrats’ past impeachment of Trump will have a future effect on his ability to respond to the crisis he created with the assassination

Let me be clear: I don’t think Trump assassinated Soleimani to distract from impeachment. I think he assassinated Soleimani because he’s a narcissist who responds to slights by lashing out, and his top advisors Mark Esper and Mike Pompeo are committed to Raytheon, Rapture, and a dangerously escalatory Iran policy, and so in this case did not rein in the natural result of arming someone with Trump’s narcissism, which is to use force where diplomacy would be more effective.

But here we are, with a dead Iranian general and fewer allies in the Middle East and few adults running policy, which may well be a recipe for disastrous things to come.

Trump (and his supporters’) refusal to take responsibility for their own actions is particularly toxic in this context because his policies and incompetent implementation of them are highly likely to fail, and the only way Trump can sustain support while presiding over obvious and foreseeable failures is to blame some other entity, which in this case includes Democrats and Iranians. And the only way for him to continue failing policies even while it’s clear they are failing is to pretend they’re not the cause of the failure.

Trump’s excuses for not briefing the Gang of Eight are particularly worrisome. It’s bad enough he didn’t do so, both for Constitutional and practical reasons. Even Richard Burr or Mitch McConnell might have advised Trump to take a more moderate approach. And had Trump briefed Nancy Pelosi, Adam Schiff, or Chuck Schumer, any one of them might have said something to make it clear that if he did this and it blew up in his face, they would make it clear to the public that he had made the decision against their advice. Our system of briefing the Gang of Eight on covert operations is a terrible way to vet military and intelligence operations (not least because you don’t get in those positions unless you’re a hawk). But in this instance, it might have made Trump worry about being shamed if he ignored the advice. It also would have offered Trump the ability — one George Bush used aggressively to survive his scandalous embrace of torture and illegal wiretapping — to claim there was bipartisan awareness of the actions, which might make it more likely to craft a bipartisan response if things do start to go south.

But Trump doesn’t like the humiliation of hearing advice he doesn’t like, and so he didn’t brief  the Gang of Eight beforehand.

He owns this decision, and all its consequences, because he chose to make the decision without following the norm that would allow him to share the blame.

But that raises the stakes for him to find scapegoats. It’s a feedback loop, where his refusal to listen to competent advice increases the likelihood of stupid decision and his defensiveness about admitting all that, thereby raising the stakes on having scapegoats still further.

And that, in turn, raises the aggressiveness he needs to direct at his scapegoats. Democrats (and Iranians and NATO) must not be wrong. They must be disloyal or traitors or Jew-ridden socialist countries or terrorists. Indeed, that’s likely one of the reasons why Trump so readily adopts inflammatory slurs with no basis in fact: because he has to dehumanize his scapegoats, to make sure no one thinks too much about what function that scapegoating plays.

It’s all a recipe for increasing violence.

And at the core, on the Soleimani assassination, the case that Trump is responsible is not just obvious — best embodied by his refusal to brief the Gang of Eight even while telegraphing his attack to his cronies at Mar-a-Lago — but a root cause of why he wants to build his scapegoats in from the start.

Revisiting the First Time President Trump Blabbed Out Classified Information for Political Gain

/18 Comments/in , , , , /by

I’d like to revisit what might be the first time in his presidency that Donald Trump blabbed out highly classified information for political gain. Trump appears to have endangered the investigation into CIA’s stolen hacking tools, all to blame Obama for the leak.

It happened on March 15, 2017, during an interview with Tucker Carlson.

Amid a long exchange where Tucker challenges Trump, asking why he claimed — 11 days earlier — that Obama had “tapped” Trump Tower without offering proof, Trump blurted out that the CIA was hacked during the Obama Administration.

Tucker: On March 4, 6:35 in the morning, you’re down in Florida, and you tweet, the former Administration wiretapped me, surveilled me, at Trump Tower during the last election. Um, how did you find out? You said, I just found out. How did you learn that?

Trump: I’ve been reading about things. I read in, I think it was January 20th, a NYT article, they were talking about wiretapping. There was an article, I think they used that exact term. I read other things. I watched your friend Bret Baier, the day previous, where he was talking about certain very complex sets of things happening, and wiretapping. I said, wait a minute, there’s a lot of wiretapping being talked about. I’ve been seeing a lot of things. Now, for the most part I’m not going to discuss it because we have it before the committee, and we will be submitting things before the committee very soon, that hasn’t been submitted as of yet. But it’s potentially a very serious situation.

Tucker: So 51,000 people retweeted that, so a lot of people thought that was plausible, they believe you, you’re the president. You’re in charge of the agencies, every intelligence agency reports to you. Why not immediately go to them and gather evidence to support that?

Trump: Because I don’t want to do anything that’s going to violate any strength of an agency. You know we have enough problems. And by the way, with the CIA, I just want people to know, the CIA was hacked and a lot of things taken. That was during the Obama years. That was not during, us, that was during the Obama situation. Mike Pompeo is there now, doing a fantastic job. But we will be submitting certain things, and I will be perhaps speaking about this next week. But it’s right now before the Committee, and I think I want to leave it at that. I have a lot of confidence in the committee.

Tucker: Why not wait to tweet about it until you can prove it? Does it devalue your words when you can’t provide evidence?

Trump: Well because the NYT wrote about it. You know, not that I respect the NYT. I call it the failing NYT. They did write on January 20 using the word wiretap. Other people have come out with —

Tucker: Right, but you’re the President. You have the ability to gather all the evidence you want.

Trump: I do, I do. But I think that frankly we have a lot right now and I think if you watch, uh, if you watched the Brett Baier and what he was saying and what he was talking about and how he mentioned the word wiretap, you would feel very confident that you could mention the name. He mentioned it and other people have mentioned it. But if you take a look at some of the things written about wiretapping and eavesdropping, and don’t forget when I say wiretap, those words were in quotes, that really covers, because wiretapping is pretty old fashioned stuff. But that really covers surveillance and many other things. And nobody ever talks about the fact that it was in quotes but that’s a very important thing. But wiretap covers a lot of different things. I think you’re going to find some very interesting items over the next two weeks. [my emphasis]

It was clear even at the time that it was a reference to the Vault 7 files, now alleged to have been leaked to WikiLeaks by Joshua Schulte; the first installment of files were released eight days earlier.

The next day, Adam Schiff, who as the then-Ranking HPSCI member, likely had been briefed on the leak, responded to Trump’s comments and suggested that, while Trump couldn’t have broken the law for revealing classified information, he should nevertheless try to avoid releasing it like this, without any kind of consideration of the impact of it.

Last night, the President stated on Fox News that “I just wanted people to know, the CIA was hacked, and a lot of things taken–that was during the Obama years.” In his effort to once again blame Obama, the President appears to have discussed something that, if true and accurate, would otherwise be considered classified information,

It would be one thing if the President’s statement were the product of intelligence community discussion and a purposeful decision to disclose information to the public, but that is unlikely to be the case. The President has the power to declassify whatever he wants, but this should be done as the product of thoughtful consideration and with intense input from any agency affected. For anyone else to do what the President may have done, would constitute what he deplores as “leaks.”

Trump did reveal information the CIA still considered classified. At the very least, by saying that CIA got hacked, he confirmed the Vault 7 documents were authentic files from the CIA, something the government was not otherwise confirming publicly at that time. (Compare Mike Pompeo’s oblique comments about the leak from a month later.)

His reference to the volume of stolen files may have been based on what the CIA had learned from reviewing the initial dump; court filings make it clear the CIA still did not know precisely what had been stolen.

His reference to a hack, rather than a leak, is an interesting word choice, as the compromise has usually been called a leak. But Schulte’s initial search warrants listed both Espionage and the Computer Fraud and Abuse Act, meaning the government was treating it as (partly) a hacking investigation. And some of the techniques he allegedly used to steal the files are the same that hackers use to obfuscate their tracks (which is unsurprising, given that Schulte wrote some of the CIA’s obfuscation tools).

Perhaps the most damning part of Trump’s statement, however, was the main one: that the theft had taken place under Obama. WikiLeaks’ initial release was totally noncommittal about when they obtained the files, but said it had been “recent[].” By making it clear that the government knew the theft had taken place in 2016 and not more “recently,” Trump revealed a detail that would have made it more likely Schulte would realize they believed he was the culprit (though he knew from the start he’d be a suspect), given that he’d left the agency just days after Trump was elected.

The most damning part of all of this, though, is the timing. Trump made these comments at an unbelievably sensitive time in the investigation.

Tucker did the interview while accompanying Trump to Detroit on March 15, 2017, which means the interview took place sometime between 10:50 AM and 3:30 PM (Tucker said the interview happened at Willow Run Airport, but this schedule says he flew into DTW). Unless it was given special billing, it would have aired at 9PM on March 15.

That means Trump probably made the comments as the FBI was preparing a search of Schulte’s apartment, the first step the FBI took that would confirm for Schulte that he was the main suspect in the leak. Trump’s comments likely aired during the search, before the moment Schulte left his apartment with two passports while the search was ongoing.

CIA had had a bit of advanced warning about the leak. In the lead-up to the leaks (at least by February 3), a lawyer representing Julian Assange, Adam Waldman, was trying to use the Vault 7 files to make a deal with the US government, at first offering to mitigate the damage of the release for some vaguely defined safe passage for Assange. The next day, WikiLeaks first hyped the release, presumably as part of an attempt to apply pressure on the US. Shortly thereafter, Waldman started pitching Mark Warner (who, with Richard Burr, could have granted Assange immunity in conjunction with SSCI’s investigation). On February 17, Jim Comey told Warner to stop his negotiations, though Waldman would continue to discuss the issue to David Laufman at DOJ even after the initial release. Weeks later, WikiLeaks released the initial dump of files on March 7.

An early WaPo report on the leak (which Schulte googled for its information about what the CIA knew before WikiLeaks published) claimed that CIA’s Internal Security had started conducting its own investigation without alerting FBI to the leak (though obviously Comey knew of it by mid-February). The same report quoted a CIA spox downplaying the impact of a leak it now calls “catastrophic.”

By March 13, the day the FBI got its first warrant on Schulte, the FBI had focused on Schulte as the primary target of the investigation. They based that focus on the following evidence, which appears to incorporate information from the CIA’s own internal investigation, an assessment of the first document dump, and some FBI interviews with his colleagues in the wake of the first release:

  • The FBI believed (and still maintains) that the files were stolen from the onsite backup server
  • Schulte was one of a small group of SysAdmins who had privileges to that server (in the initial warrant they said just three people did but have since revised the number to five)
  • The FBI believed (mistakenly) that the files were copied on March 7, 2016, a time when one of the other two known SysAdmins was offsite
  • Schulte had had a blow-up with a colleague that led to him souring on his bosses
  • During the period the CIA was investigating that blow-up, Schulte had reset his administrative privileges to restore his access to the backup server and one project he was working on
  • As part of his August security clearance renewal, some of Schulte’s colleagues said they thought he could be subject to coercion and was not adhering to rules on removable media
  • Just before he left, Schulte created two documents claiming to have raised concerns about the security of the CIA’s servers that (the government claims) he didn’t actually raise
  • Names identifying the two other SysAdmins who had access to the backup server, but not Schulte’s, were included in the initial release
  • In six days since the initial Vault 7 release, Schulte had contacted colleagues and told them he thought he’d be a suspect but was not the leaker

Having obtained a warrant based off that probable cause, on the afternoon of March 13, FBI agents went to conduct a covert search of Schulte’s apartment. The FBI was trying to conduct the search before a trip to Mexico Schulte was scheduled to take on March 16, which (as the affidavit noted) would have been only his second trip outside the US reflected in DHS records. But when the FBI got to Schulte’s apartment, they found a slew of computer devices (listed at PDF 116), making the covert search impractical. So overnight, they obtained a second warrant for an overt search; the FBI obtained that warrant at 1:36 AM on March 14. During that same overnight trip to the magistrate, the FBI also obtained warrants for Schulte’s Google, Reddit, and GitHub accounts.

There’s a lack of clarity about this detail in the public record: the warrant is dated March 14, but it is described as the “March 15 warrant.” The overt search continued through the night in question, so it could either be March 14-15 or March 15-16. The government’s response to Schulte’s motion to suppress the search says, “The Overt Warrant was signed during the early morning hours of March 14, 2017, and the FBI executed the warrant the same day.” But a May 5, 2017 affidavit (starting at PDF 129) says the overt search of Schulte’s apartment took place on March 15.

Whatever day the search happened, it appears that the search started when the lead agent approached Schulte in the lobby of Bloomberg, perhaps as he was leaving work, and asked if he had a role in the leak, which Schulte denied. (This conversation is one basis for Schulte’s false statements charge; the Bill of Particulars describing the interview says it took place on March 15.) The agent got Schulte to confirm he was traveling to Mexico on March 16, then got Schulte to let them into his apartment (Bloomberg is at 120 Park Avenue; Schulte lived at 200 E 39th Street, five blocks away). The search of Schulte’s apartment went through the night. Sometime between 10 and 11 PM, Schulte left his apartment, telling the FBI Agents he’d return around 11:30 PM. By 12:15 AM he hadn’t returned, so the lead FBI Agent went and found him leaving Bloomberg. They told him they had found classified information in his apartment, and asked for his passports. He went back to his workstation to retrieve them, and voluntarily handed them over. The affidavit describes Schulte being put on leave by Bloomberg on March 16, the last day he reported to work at Bloomberg (which would be consistent with the search taking place on the night of March 15-16).

If the search took place overnight on March 14-15, Trump’s statements might have reflected knowledge the search had occurred (and that FBI had found classified information in Schulte’s apartment that would sustain an arrest on false statements and mishandling classified information charges, if need be). If the search took place overnight on March 15-16 (which seems to be what the record implies), it would mean Trump made the comments before the search and they would have been aired on Fox News during it.

In other words, Trump may well have made the comments at a time when FBI was trying to avoid giving Schulte any advance notice because they were afraid he might destroy evidence.

In addition, Trump undoubtedly made the comments (and Schiff highlighted the significance of them) before Schulte had follow-up interviews on March 20 and 21, at which he denied, among other things, ever making CIA’s servers more vulnerable to compromise. If Schulte had read Trump’s comment he’d be more worried about anything akin to hacking.

The question is, how much of what Trump said reflected real knowledge of the investigation, and to what degree should he have known that blurting this out could be unbelievably damaging to the investigation?

Given Trump’s imprecision in speech, his comments could derive entirely from the Vault 7 release itself, or at least a really high level briefing (with pictures!) of the compromise and CIA’s efforts to mitigate it.

But there are two pieces of evidence that suggest Trump may have been briefed in more detail about Schulte as a target.

Jim Comey testified on June 8, 2017 that, in addition to asking him to, “let this [Flynn thing] go,” Trump had asked him about a classified investigation, but that conversation was entirely professional.

WARNER: Tens of thousands. Did the president ever ask about any other ongoing investigation?

COMEY: No.

WARNER: Did he ever ask about you trying to interfere on any other investigation?

COMEY: No.

WARNER: I think, again, this speaks volumes. This doesn’t even get to the questions around the phone calls about lifting the cloud. I know other members will get to that, but I really appreciate your testimony, and appreciate your service to our nation.

COMEY: Thank you, Senator Warner. I’m sitting here going through my contacts with him. I had one conversation with the president that was classified where he asked about our, an ongoing intelligence investigation, it was brief and entirely professional.

Obviously there were a ton of investigations and this conversation could have taken place after Trump made the public comments. But the Vault 7 investigation would have been one of the most pressing investigations in the months before Comey got fired.

More directly on point, in his Presumption of Innocence blog, Schulte describes the interactions with the FBI during the search — which are consistent with them taking place on March 15 — this way (he has not sought to suppress the statements he made that night, which suggests his claims of coercion aren’t strong enough to impress his attorneys):

The FBI set an artificial and misguided deadline on the night before I was to depart NYC for Cancun to prevent me from leaving the country. Despite my insistence with them that the notion someone would flee the country AFTER the publication literally made no sense—if it were me communicating with WikiLeaks then obviously I would have made damn sure to leave BEFORE it happened—they were persistent in their belief that I was guilty. The FBI literally told me that everyone ”up to the top” knew we were having this conversation and that “they” could not afford to let me leave the country. “They” could not afford another national embarrassment like Snowden. “They” would not, under any circumstances, allow me to leave the country. The FBI were prepared and willing to do anything and everything to prevent me from leaving the country including threaten my immediate arrest arrest unless I surrendered my passport. I did NOT initially consent, but the FBI held me against my will without any arrest warrant and even actively disrupted my attempts to contact an attorney. Intimidated, fearful, and without counsel, I eventually consented. I was immediately suspended from work

Schulte’s an egotist and has told obvious lies, especially in his public statements attempting to claim innocence. But if it’s true that the FBI agents told him everyone “up to the top” knew they were having the conversation with him on March 15, it might reflect knowledge that people at least as senior as Comey or Sessions or Pompeo knew the FBI was going to conduct an overt search with one goal being to prevent Schulte from leaving the country. And given the purported reference to Snowden and the way the entire government pursued him, it is not impossible that Trump had been asked to authorize Schulte’s arrest if he didn’t surrender his passports.

In other words, it is certainly possible that when Trump boasted that the CIA’s hacking tools had been stolen under Obama and not under his Administration (an interesting claim to begin with, given the delay in CIA alerting the FBI that WaPo reported), he had been briefed about Schulte within the last 48 hours or even that morning.

To be clear, I’m not suggesting that this comment was a deliberate attempt to sabotage the FBI investigation. Trump has a habit of mindlessly repeating whatever he has heard most recently, so if Trump were briefed on the investigative steps against Schulte on the 14th or 15th, it’s not surprising he brought it up when sitting with Tucker mid-day on the 15th, particularly given that they were discussing surveillance.

But imagine how this would look to the FBI as Trump started engaging in outright obstruction of the Russian investigation, particularly by firing Comey. There’s nothing in the public record that suggests a tie between Schulte’s leaks and Russia. But Schulte’s leaks (most notably the Marble Framework he authored) not only would have made it easier for Russia to identify CIA’s Russian targets, but they would have forced CIA to rebuild during a period it was trying to figure out what had happened in 2016 (and NSA would be in the same position, post Shadow Brokers). When the FBI was trying to keep their focus on Schulte secret for one more day so they could get to his apartment before he started destroying things, Trump sat before a TV camera and made a comment that might have alerted Schulte the FBI did, indeed, believe he was the culprit.

And Trump did so all to blame Obama for a catastrophic leak rather than himself.

The Parts of the Mueller Report withheld from Roger Stone Show the Centrality of His WikiLeaks Activities to Trump’s Obstruction

/116 Comments/in , , /by

Along with denying most of Roger Stone’s frivolous challenges to his prosecution, Amy Berman Jackson also partly granted his motion to get some of the redacted Mueller Report. As she laid out, she permitted the government to withhold grand jury information, sources and methods, stuff that would harm the reputation of others, and prosecutorial deliberations.

But the Court was of the view that the Report of the Special Counsel should receive separate consideration since a great deal of deliberative material within the Report had already been released to the public.

[snip]

Having considered the defendant’s motion, the government’s response and supplemental submissions, and the Report itself, the Court has determined that the defense should have the limited access he requested to some, but not all, of the redacted material.32 Insofar as defendant’s motion to compel seeks any material that was redacted from the public report on the basis that its release would infringe upon the personal privacy of third parties or cause them reputational harm; pursuant to Federal Rule of Criminal Procedure 6(e); or on the basis of national security or law enforcement concerns, including information that if revealed, could potentially compromise sensitive information gathering sources, methods, or techniques or harm ongoing intelligence or law enforcement activities, the Court will deny the motion.33 With respect to material that was withheld solely on the basis that its release could affect the ongoing prosecution of this case, the Court has concluded that the material to be specified in the order issued with this opinion should be provided to counsel for the defendant subject to the terms and conditions of the Protective Order in this case.

As she described, the government “submit[ed] unredacted portions of the Report that relate to defendant ‘and/or “the dissemination of hacked materials.”‘” Then she and the government conducted a sealed discussion about what could be released to Stone. In addition to her opinion, she submitted an order describing which specific pages must now be released to Stone.

We can compare what the government identified as fitting her order — this includes anything that fits the order, whether redacted or not — with what she has ordered released to Stone (note, the government either did not include Appendix D, showing referrals, or ABJ didn’t mention it, because in addition to an unredacted reference to Stone, there are referrals that the FOIA copies show to be related to Stone; nor did it include questions to Trump).

ABJ has not ordered the government to turn over anything pertaining to how GRU got stolen documents to WikiLeaks. This is precisely the kind of thing Stone is trying to get with his demands for Crowdstrike reports; after ABJ pointed out if they really wanted the reports, they would have tried subpoenaing Crowdstrike and they are now launching an attempt to do that. That ABJ has not ordered the government to turn this material over does not bode well for Stone’s plans to make this trial about the hack-and-leak rather than his lies. I would not be surprised if Stone made a second effort to get this information.

She has permitted the government to withhold all the prosecutorial decisions covered by her order except the one pertaining to Stone’s own lies. In addition, she let the government withhold one line about how they hadn’t determined whether or not Stone and Corsi had managed to optimize the release of the Podesta emails in October (though she did give Stone the more detailed discussion of that).

But ABJ has not included any of the references in the main part of Volume II in her order (presumably to protect Trump’s reputation!). That Volume includes three references to Trump and the campaign’s enthusiasm for or attempts to optimize the WikiLeaks releases through Stone, the reference to Richard Burr leaking news of the targets of the investigation (including Stone) to the White House before Jim Comey got fired, and three instances describing Trump floating pardons to Stone or otherwise encouraging him to remain silent.

It also includes the page on which this passage appears:

After Flynn was forced to resign, the press raised questions about why the President waited more than two weeks after the DOJ notification to remove Flynn and whether the President had known about Flynn’s contacts with Kislyak before the DOJ notification.244 The press also continued to raise questions about connections between Russia and the President’s campaign.245 On February 15, 2017, the President told reporters, “General Flynn is a wonderful man. I think he’s been treated very, very unfairly by the media.”246 On February 16, 2017, the President held a press conference and said that he removed Flynn because Flynn “didn’t tell the Vice President of the United States the facts, and then he didn’t remember. And that just wasn’t acceptable to me.” 247 The President said he did not direct Flynn to discuss sanctions with Kislyak, but “it certainly would have been okay with me if he did. I would have directed him to do it if I thought he wasn’t doing it. I didn’t direct him, but I would have directed him because that’s his job.”248 In listing the reasons for terminating Flynn, the President did not say that Flynn had lied to him.249 The President also denied having any connection to Russia, stating, “I have nothing to do with Russia. I told you, I have no deals there. I have no anything.”250 The President also said he “had nothing to do with” WikiLeaks’s publication of information hacked from the Clinton campaign.251 [my emphasis]

Clearly, it was included for Trump’s public denials — at the moment he fired Flynn in an attempt to stop the Russian investigation — of having anything to do with WikiLeaks’ publication of materials stolen from Hillary’s campaign. It is, on its face, a reference to the publication of the stolen emails, and as such qualifies under ABJ’s order. At that level, it is unremarkable.

But the government is treating it not as Trump making empty denials, but instead to make a claim specifically disavowing any involvement in WikiLeaks’ publication of stolen emails. Mueller’s team put the claim right next to a claim we know to be false, a claim designed to hide his Trump Tower deals. And he put all that amid a discussion of why he first did not, and then did, fire Mike Flynn.

Now consider something else: While it doesn’t appear in the Mueller Report at all, one thing Flynn told prosecutors was that after WikiLeaks started dumping John Podesta’s emails, he took part in conversations during which the campaign discussed reaching out to WikiLeaks.

The defendant also provided useful information concerning discussions within the campaign about WikiLeaks’ release of emails. WikiLeaks is an important subject of the SCO’s investigation because a Russian intelligence service used WikiLeaks to release emails the intelligence service stole during the 2016 presidential campaign. On July 22, 2016, WikiLeaks released emails stolen from the Democratic National Committee. Beginning on October 7, 2016, WikiLeaks released emails stolen from John Podesta, the chairman of Hillary Clinton’s 2016 presidential campaign. The defendant relayed to the government statements made in 2016 by senior campaign officials about WikiLeaks to which only a select few people were privy. For example, the defendant recalled conversations with senior campaign officials after the release of the Podesta emails, during which the prospect of reaching out to WikiLeaks was discussed.

There’s nothing in the public record that suggests Flynn knew of Trump’s efforts, during the campaign, to build a Trump Tower. But he did know about Trump’s efforts to optimize WikiLeaks’ releases of stolen emails. And Trump would have known that when he considered the impact of Flynn’s ties to Russia being investigated by the FBI.

And the treatment of that references as a real denial — as Trump evincing guilt even as he fired Flynn — sure makes the Flynn firing more interesting.

The Other Servers and Laptops FBI Never Investigated: VR Systems and North Carolina Polling Books

/40 Comments/in /by

Ron Wyden had a lot to say in his minority views to the SSCI Report on election security released yesterday, mostly arguing that there need to be national standards and assistance and that no one can make any conclusions about the effects of Russia’s efforts in 2016 because no one collected the data to make such conclusions.

But there’s one line in his section raising questions about the 2016 conclusions I find particularly interesting, pertaining to VR Systems (which he doesn’t name).

Assessments about Russian attacks on the administration of elections are also complicated by newly public information about the infiltration of an election technology company.

Since the Mueller Report came out, Wyden has been trying to chase down this reference in the report to the VR Systems hack.

Unit 74455 also sent spear-phishing emails to public officials involved in election administration and personnel a~ involved in voting technology. In August 2016, GRU officers targeted employees of [redacted; VR Systems], a voting technology company that developed software used by numerous U.S. counties to manage voter rolls, and installed malware on the company network.

In May, he sent a letter to VR Systems President Mindy Perkins, asking how the company could claim, in March 2018, that it had not experienced a security breach when the report said it had been infected with malware in August 2016. In response, the company told Wyden (according to a letter he and Amy Klobuchar sent FBI Director Chris Wray) that they had alerted the FBI that they found suspicious IPs in their logs in real time, but that FBI had never explained the significance of that.

In a May 16, 2019, letter to Senator Wyden, VR Systems described how it participated in an August 2016 conference call with law enforcement. Participants in that call were apparently asked by the FBI to “be on the lookout for certain suspicious IP addresses.” According to VR Systems, the company examined its website logs, “found that several of the IP addresses had, in fact, visited our website” and as a result, the company “notified the FBI as we had been directed to do.” VR Systems indicates they did not know that these IP addresses were part of a larger pattern until 2017, which suggests the FBI may not have followed up with VR Systems in 2016 about the nature of the threat they faced.

The implication from Wyden’s letters is that VR Systems only hired FireEye to conduct an assessment of what happened after Reality Winner leaked an NSA document making it clear they had been targeted by GRU in 2017. [Update: Kim Zetter actually reported this here.]

In their June 12 letter, Wyden and Klobuchar asked Wray whether the FBI followed up on VR Systems’ report.

  1. What steps, if any, did the FBI take to examine VR Systems’ servers for evidence of a successful cyber breach after the company alerted the FBI, in August of 2016, to the presence of suspicious IP addresses in its website logs? If the FBI did not examine VR Systems’ servers or request access to those servers, please explain why.
  2. Several months after VR Systems first contacted the FBI, electronic pollbooks made by the company malfunctioned during the November 8 general election in Durham County, North Carolina. In the two and a half years since that incident in Durham County, has the FBI requested access to the pollbooks that malfunctioned, and the computers used to configure them, in order to examine them for evidence of hacking? If not, please explain why.
  3. VR Systems contracted FireEye to perform a forensic examination of its systems in the summer of 2017. Has the FBI reviewed FireEye’s conclusions? If so, what were its key findings?

It’s unclear how Wray answered (or didn’t). But just before Wyden sent this letter, the WaPo reported that no one had yet conducted a forensic examination of the laptops used in the VR Systems polling books in North Carolina. After Democrats took over control, they finally persisted in getting DHS to agree to check the laptops.

On Tuesday, the Department of Homeland Security told The Washington Post it will conduct a forensic analysis of the laptops used in Durham County elections in 2016. Lawson said North Carolina first asked the department to conduct such a review more than 18 months ago, though he added that DHS has generally been a “good partner” on election security.

“We appreciate the Department of Homeland Security’s willingness to make this a priority so the lingering questions from 2016 can be addressed in advance of 2020,” said Karen Brinson Bell, the newly appointed executive director of the State Board of Elections.

After the election, Durham County hired a firm called Protus3 to dig into what happened. The security consultant said it appeared the problems were caused by user error but ended its 12-page report with a list of recommendations that included examining computers in a lab setting and interviewing more election workers.

Durham County elections director Derek Bowens said he is comfortable with the report’s conclusions. Even so, in 2017, the county switched to electronic poll books created by the state. Bowens said in an interview that the state’s software would save money and is, in his view, better.

But for North Carolina officials, concerns resurfaced in June 2017 when the website Intercept posted a leaked National Security Agency report referencing “cyber espionage operations against a . . . U.S. company in August 2016.” The NSA report said that “it was likely that at least one account was compromised.”

VR Systems soon acknowledged that hackers had targeted the company but insisted that its network had not been breached.

North Carolina officials weren’t so sure.

“This was the first leak that indicated anything like a nation-state actor targeting a voting systems vendor,” Lawson said.

The state elections board soon launched its own investigation, seizing 40 laptops from Durham in July. And it suspended the certification that allowed more than 20 North Carolina counties to use VR Systems’ poll books during elections, an action that would later land in court. “Over the past few months there has been a considerable change in the election security landscape and the level of scrutiny we receive,” the board wrote in a letter explaining its decision to VR Systems.

No one working for the board had the technical expertise to do a forensic examination of the machines for signs of intrusion. Staffers asked DHS for technical help but did not get a substantive answer for a year and a half, Lawson said.

As noted, FireEye appears to have done an assessment at VR Systems itself in the wake of the Winner disclosure. The WaPo reports that FireEye declared VR Systems hadn’t been hacked, but wouldn’t share any information with Wyden or–apparently–DHS.

VR Systems said a cybersecurity firm it hired to review its computer network in 2017 found no evidence of a hack. A subsequent review by DHS also found no issues, the company said. VR Systems declined to give Wyden documentation of those reviews, citing the need to protect proprietary information.

Wyden in a statement to The Post accused VR Systems of “stonewalling congressional oversight.”

A senior U.S. official confirmed DHS’s review of VR Systems’s network to The Post and noted that by the time agency investigators arrived, a commercial vendor had already “swept” the networks. “I can’t tell you what happened before the commercial vendor came in there,” the official said, speaking on the condition of anonymity to discuss a sensitive matter.

The same day as the WaPo report, Kim Zetter reported that VR Systems used remote updates for their software, opening up a possible point of compromise for hackers.

For two years, GRU hack denialists have thought it was the most important thing that the DNC provided FBI Crowdstrike’s forensic images of the hacked laptops, rather than providing the servers themselves.

But that step has, apparently, not been done yet with VR Systems. And the laptops that failed on election day are only now being forensically examined.  Which is why, I presume, that Wyden believes it’s premature to claim no vote totals were affected on election day 2016.

Ann Donaldson’s Code Makes Richard Burr’s Tip-Off to the White House Far More Damning

/48 Comments/in , /by

The House Judiciary Committee released Ann Donaldson’s responses to their questions yesterday. In general, she was directed not to answer even more questions than Hope Hicks was. But her answers are interesting on several counts.

First, she offers a range of answers that sometimes confirm she was part of a discussion (and that it happened in Don McGahn’s office or via telephone), sometimes suggest she was part of such a conversation but often claims she does not have an independent memory of whether she was part of it, and sometimes make clear that she was not present. Generally, her answers suggest she learned of most of the events covered by the Mueller Report either by listening in on a phone call or by acting as a sounding board for Don McGahn. She states, “I was in meetings directly with President Trump fewer than ten times” (though she was clearly on McGahn’s side of phone calls more times than that).

But Donaldson’s answers are also interesting for the way in which she applies a series of pat answers to certain questions. Here’s the “code” she uses to answer the questions:

The White House has directed that I not provide any further answer to this question because of the constitutionally-based Executive Branch confidentiality interests that are implicated. These are obviously questions for which a truthful answer would be especially damning to the President.

I have no reason to question the accuracy of the Special Counsel’s Office’s description of my handwritten notes. Donaldson answers this way for many questions about her notes, effectively confirming that the Mueller Report’s citations of her notes are accurate.

Any characterization of my notes set forth in the Report is that of the Special Counsel’s Office and may be derived, in part, from sources other than my notes. One time, she adds this to a description of something in her notes, in response to this question:

Page 72 of the Report recount a meeting that occurred the morning of May 10, 2017 at the White House involving former acting FBI Director Andrew McCabe and the President in which the President said he “received ‘hundreds’ of messages from FBI employees indicating their support for terminating Comey” and “asked McCabe who he had voted for in the 2016 Presidential election.” Footnote 477 notes that the account of the meeting is consistent with your notes at Bates Number SC_AD_00347.

She also answers similarly — suggesting things attributed to her in the Mueller Report may involve her relaying something she learned or other Mueller sources — in response to several questions about her interviews with Mueller.

I affirm the accuracy of the voluntary statements I made when being interviewed by the Special Counsel’s Office. Eight times, she affirms the accuracy of something the report says she said. Those are:

  1. Footnote 279 on page 49 of the Mueller Report references an entry in your notes (SC_AD_00123) stating, “just in the middle of another Russia Fiasco.” The footnote cites back to a discussion on March 2, 2017 between the President and Mr. McGahn, during which “McGahn understood the President to be concerned that a recusal would make Sessions look guilty for omitting details in his confirmation hearing; leave the President unprotected from an investigation that could hobble the presidency and derail his policy objectives; and detract from favorable press coverage of a Presidential Address to Congress the President had delivered earlier in the week.” (15)
  2. Page 51-52 of the Report states that on March 5, 2017, President Trump “told advisors he wanted to call the Acting Attorney General [Dana Boente] to find out whether the White House or the President was being investigated.” The accompanying citation (footnote 306) cites to an entry in your notes, Bates Number SC_AD_000168, stating “POTUS wants to call Dana/Is investigation/No/We know something on Flynn/GSA got contacted by FBI/There’s something hot.” (28)
  3. Page 54 of the Report indicates that on March 21, 2017 “[t]he President called McGahn repeatedly that day to ask him to intervene with the Department of Justice, and, according to the notes, the President was ‘getting hotter and hotter, get rid?’” (40)
  4. Footnote 385 of Page 62 of the Report references an entry in your notes at SC_AD_00265 that states “P called Comey – Day we told him not to? ‘You are not under investigation’ NK/China/Sapping Credibility.” (46)
  5. Page 68 of the Report states, “Notes taken by Donaldson on May 9 reflected the view of the White House Counsel’s Office that the President’s original termination letter should ‘[n]ot [see the] light of day’ and that it would be better to offer “[n]o other rationales” for the firing than what was in Rosenstein’s and Sessions’ memoranda.” The accompanying citation (footnote 442) cites your notes, Bates Number SC_AD_00342. (51)
  6. The Report, on pages 81 and 82 citing to your notes at Bates Number SC_AD_00361, states (footnote 541) that Mr. McGahn “advised that the President could discuss the issue [of whether Mr. Mueller had conflicts of interest] with his personal attorney but it would “‘look like still trying to meddle in [the] investigation’ and ‘knocking out Mueller’ would be ‘[a]nother fact used to claim obst[ruction] of justice.’” (63)
  7. Page 82 of the Report states that Mr. McGahn also “told the President that his ‘biggest exposure’ was not his act of firing Comey but his ‘other contacts’ and ‘calls,’ and his ‘ask re: Flynn.’” The accompanying citation (footnote 542) refers to your notes, SC_AD_00361. (64)
  8. Page 113 of the Report states that on January 25, 2018, the New York Times reported that in June 2017, the President had ordered Mr. McGahn to have the Department of Justice fire the Special Counsel. Page 114 of the Report states that on January 26, 2018, the President’s personal counsel called Mr. McGahn’s personal attorney and said that the President wanted Mr. McGahn to put out a statement denying that he had been asked to fire the Special Counsel and that he had threatened to quit in protest. (77)

I have no reason to question the accuracy of the Special Counsel’s Office’s description of my voluntary statements to it, although I do not have access to its records of my statements. For a number of other questions, however, she answers (as she does for many questions about her notes) that she has no reason to question the accuracy of what the report writes. It’s unclear what the difference is (though the answers she affirms generally make McGahn look smart as compared to Trump.)

Given that code, I’m particularly interested in her responses to question 30, which is about Richard Burr informing the White House about the targets of the FBI investigation, because it suggests Trump may have learned of the list.

In response to the first question on it, Donaldson provides most of her regular coded answers. She can’t speak to the accuracy of Jim Comey’s briefing of the Gang of Eight, she doesn’t dispute Mueller’s characterization of her notes and comments, but some of what is included may be from other people.

Page 52 of the Report indicates that the week after Mr. Comey briefed congressional leaders “about the FBI’s investigation of Russian interference, including the identification of the principal U.S. subjects of the investigation” on March 9, 2017, one of the leaders briefed, Senate Select Committee on Intelligence Chairman Senator Richard Burr, was in contact with the White House Counsel’s office, which “appears to have received information about the status of the FBI investigation.” You are quoted in Footnote 309 as saying that Senator Burr identified “4-5 targets.”

a. Is this statement accurate?

RESPONSE: I was not present for Mr. Comey’s briefing to the Senate Select Committee on Intelligence, and therefore I cannot confirm whether the description of his briefing to congressional leaders is accurate.

I have no reason to question the accuracy of the Special Counsel’s Office’s quotation of “4-5 targets” from my notes.

I have no reason to question the accuracy of the Special Counsel’s Office’s description of the voluntary statements I made to it, although I do not have access to its records of my statements.

Any characterization of my voluntary statements set forth in the Report is that of the Special Counsel’s Office and may be derived, in part, from sources other than my statements.

But then, to that same question, she endorses the characterization relayed in the Mueller Report more strongly than she does elsewhere. She didn’t take this to be Burr tipping off the White House — though she specifies that that was her belief “at the time,” suggesting she now realizes that’s not true.

As stated by the Special Counsel’s Office in the Report, at the time, I “believed these were targets of [the Senate Select Committee on Intelligence].”

When asked who initiated this contact, she provides the answer the White House has instructed her to give regarding damaging information pertaining to the President.

Who initiated the contact between the White House Counsel’s office and Senator Burr?

RESPONSE: The White House has directed that I not respond to this question because of the constitutionally-based Executive Branch confidentiality interests that are implicated.

In the course of explaining that this Burr tipoff happened via phone, she pushes back on the characterization that this was a formal briefing, which is the one time she disputes a characterization made by Mueller.

Where did the March 16, 2017 briefing from Senator Burr take place?

RESPONSE: To the extent this question refers to contact between Senator Burr and the Office of the White House Counsel on or about March 16, 2017 (I would not characterize this contact as a formal “briefing”), that conversation took place by telephone.

When asked why Burr tipped off the White House, Donaldson blames the decision on Burr, suggesting that it was done on his initiative (even in spite of her earlier answer refusing to answer just that question).

Why did Senator Burr provide this briefing to the White House Counsel’s office about the investigation into Russian election interference?

RESPONSE: I do not know. I cannot speak to Senator Burr’s state of mind.

Then Donaldson reaffirms that the conversation happened via a call to McGahn, which she was present for (note, I’m not really sure by what she means when she says she was not a participant on calls, but I wonder both whether it was via speaker phone and whether the other party was told she was listening).

Were you present for Senator Burr’s March 16, 2017 briefing to the White House Counsel’s office?

RESPONSE: To the extent this question refers to a telephone call between Senator Burr and the Office of the White House Counsel on or about March 16, 2017, I was in Mr. McGahn’s office during, but not a participant on, the telephone call.

Here’s where it gets interesting. In a series of three more questions about the call — including whether the President learned about it — Donaldson provides the answer the White House made her give regarding things that were damning to the President.

Who else was present?

RESPONSE: The White House has directed that I not respond to this question because of the constitutionally-based Executive Branch confidentiality interests that are implicated.

Describe the substance of Senator Burr’s March 16, 2017 briefing to the White House Counsel’s office.

RESPONSE: The White House has directed that I not respond to this question because of the constitutionally-based Executive Branch confidentiality interests that are implicated.

Were the contents of Senator Burr’s briefing shared with the President? If so, describe who shared the contents of the meeting and if you were present for those discussions.

RESPONSE: The White House has directed that I not respond to this question because of the constitutionally-based Executive Branch confidentiality interests that are implicated.

If no one else was present, she could have just answered that. And unless someone else was present, she should be able to answer about the substance of the question. Ditto the question about passing this information on to Trump: if there were a non-damning answer, given her other practice, she could answer it.

If McGahn passed on the list of people being investigated to Trump, it would make the conversation between Comey and Trump that took place on March 30, two weeks later, more significant. Trump starts by raising Comey’s public testimony on March 20, where he confirmed the investigation. But then Comey raises the Gang of Eight briefing.

After Comey raises the Gang of Eight briefing, Trump requests that Comey clear him publicly. But then Trump makes the comment about wanting to know if “some satellite” to his campaign did something, he would want that to be public. Remember, here’s what Burr told McGahn, with Donaldson present:

Donaldson 11/6/17 302, at 14-15. On March 16, 2017, the White House Counsel’s Office was briefed by Senator Burr on the existence of “4-5 targets.” Donaldson 11 /6/17 302, at 15. The “targets” were identified in notes taken by Donaldson as “Flynn (FBI was ~ooking for phone records”; “Comey~Manafort (Ukr + Russia, not campaign)”; [redacted reference to Roger Stone] “Carter Page ($ game)”; and “Greek Guy” (potentially referring to George Papadopoulos, later charged with violating 18 U.S.C. § 1001 for lying to the FBI). SC_AD_00198 (Donaldson 3/16/17 Notes). Donaldson and McGahn both said they believed these were targets ofSSCI. Donaldson 11/6/17 302, at 15; McGahn 12/ 12/17 302, at 4. But SSCI does not formally investigate individuals as “targets”; the notes on their face reference the FBI, the Department of Justice, and Corney; and the notes track the background materials prepared by the FBI for Corney’s briefing to the Gang of8 on March 9. See SNS-Classified-0000140-44 (3/8/17 Email, Gauhar to Page et al.); see also Donaldson 11 /6/17 302, at 15 (Donaldson could not rule out that Burr had told McGahn those individuals were the FBI’s targets).

If McGahn passed on this information, Trump would have believed that the Mike Flynn investigation would soon be over, and that Paul Manafort was not being investigated for behavior related to his campaign. Trump never gave a shit about George Papadopoulos and Carter Page.

But Roger Stone was his life-long rat-fucker. And during the campaign, Stone spoke repeatedly with Trump to inform him about what he had learned of WikiLeaks’ plans.

It’s one thing if this was a comment about Sergei Millian, as Comey thought it was. But if Trump knew at this point that Roger Stone was under investigation, that would be a very different thing.

Especially because March 2017 is when Stone ratcheted up his efforts to cover up his discussions with WikiLeaks.

As I disclosed last July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

If FBI Had Spied on Trump’s Campaign As Alleged, They’d Have Known Why Manafort Traded Michigan for Ukraine

/42 Comments/in , , /by

If the FBI had spied on Trump’s campaign as aggressively as alleged by Mark Meadows and Jim Jordan, then Robert Mueller would have been able to determine why Trump’s campaign manager had a meeting on August 2, 2016 to discuss how to get paid (or have debt forgiven) by Ukrainian and Russian oligarchs while discussing how to win Midwestern swing states and how to carve up Ukraine. In fact, the public record suggests that the FBI did not start obtaining criminal warrants on Manafort’s election year activities until the July 25, 2017 warrant authorizing the search of Manafort’s condo, which was the first known warrant obtained on Manafort that mentioned the June 9 meeting. A mid-August warrant authorizing a search of the business email via which Manafort often communicated with Konstantin Kilimnik is probably the first one investigating that August 2 meeting (as distinct from his years of undisclosed Ukrainian foreign influence peddling).

In other words, it took a full year after the Steele dossier first alleged that Paul Manafort was coordinating on the Russian election interference operation, and over a year after he offered Oleg Deripaska private briefings on the Trump campaign, before the FBI obtained a criminal warrant investigating the several known instances where Trump’s campaign manager did discuss campaign details with Russians.

While there are definitely signs that the government has parallel constructed the communications between Kilimnik and Manafort that covered the period during which he was on the campaign (meaning, they’ve obtained communications via both SIGINT collection and criminal process to hide the collection of the former), it seems highly unlikely they would have obtained campaign period communications in real time, given the FBI’s slow discovery and still incomplete understanding of Manafort’s campaign period activities. And the public record offers little certainty about when if ever Manafort — as opposed to Kilimnik who, as a foreigner overseas, was a legitimate target for EO 12333 collection, and would have been first targeted in the existing Ukraine-related investigation — was targeted under FISA directly.

All the while Manafort was on a crime spree, engaging in a quid pro quo with banker Steve Calk to get million dollar loans to ride out his debt crisis and lying to the government in an attempt to hide the extent of his ties with Viktor Yanukovych’s party.

Similarly, by all appearances the FBI remained ignorant of one of George Papadopoulos’ dodgy Russian interlocutors until after his second interview on February 16, 2017, suggesting they not only hadn’t obtained a FISA order covering him, but they hadn’t even done basic criminal process to collect the Facebook call records that would have identified Ivan Timofeev. Papadopoulos told Congress that when the FBI first interviewed him in January 2017, they knew of his extensive Israeli ties, but the asymmetry in the FBI’s understanding of Papadopoulos’ ties suggests it may have come from spying on the Israelis rather than targeting Papadopoulos himself.

Those are a few of the details illustrated by a detailed timeline of the known investigative steps taken against Trump’s associates. The details comport with a claim from Peter Strzok that he lost an argument on August 15, 2016, about whether they should pursue counterintelligence investigations of Trump Associates as aggressively as they normally would. The overt details of the investigation, at least, are consistent with Attorney General William Barr’s May 1, 2019 observation that the investigation into Trump’s associates was “anemic” at first.

The timeline does suggest that one of Trump’s associates may have been investigated more aggressively than he otherwise might have been, given the known facts. That person was Michael Cohen, whom the dossier alleged had played a central role in negotiations with Russia and even — the last, most suspect dossier report claimed — had paid hackers.

Cohen, of course, was never formally part of the campaign.

But even there, Cohen was not under investigation yet at the time Richard Burr shared the targets of the investigation with the White House on March 16, 2017 (at that point, only Roger Stone had been added to Carter Page, Papadopoulos, Manafort, and Mike Flynn, who are believed to be the four initial subjects).

In the days after Robert Mueller was appointed on May 17, 2017, the investigation might still not have amounted to anything, even in spite of Trump’s reaction, “Oh my God. This is terrible. This is the end of my Presidency. I’ m fucked.” The next day, after all, Peter Strzok (who had been involved in the investigation from the start) said, “my gut sense and concern there’s no big there there.” And less than a month later, Lisa Page appears to have suggested to Strzok that the FBI hadn’t decided whether Agents on Mueller’s team would be able to use 702 data — something that, in normal national security investigations, Agents can access at the assessment level.

But by June 21, Mueller was investigating Cohen’s Essential Consulting bank account — the one from which he paid hush payments to Stormy Daniels — because it appeared he was accepting big payments from Viktor Vekselberg, perhaps in conjunction with a plan Felix Sater pitched him on Ukranian peace. At first, Mueller got a preservation order on his Trump Organization emails. But then on July 18 — shortly after Mueller got a preservation order for all of Trump Organization emails in the wake of the June 9 meeting disclosure — Mueller got a warrant for Cohen’s emails, which set off an investigation into whether Cohen had been an unregistered foreign agent for any of a number of countries.

The investigation into the Essential Consulting account would lead the SDNY to charge him in the hush payments. And the collection on Cohen’s Trump Organization emails — collected directly from Microsoft instead of obtained via voluntary production — that would disclose the Trump Tower Moscow plan that Trump lied and lied and lied about.

Only after Mueller started ratcheting up the investigation against Cohen did Mueller first get a warrant on Roger Stone, in August 2017. That’s one of the two investigations (the other being Manafort) that remains ongoing.

Meanwhile, every one of these targets continued to engage in suspect if not criminal behavior. Manafort went on a crime spree to hide his paymasters, stay afloat long enough to re-engage them, and in January 2017 even tried to “recreate [his] old friendship” with Oleg Deripaska. Carter Page went to Moscow in December 2016 and claimed to be speaking on behalf of Trump with regards to Ukrainian deals. Papadopoulos considered a deal with Sergei Millian worth $30,000 a month while working at the White House, starting the day after the election, something even he thought might be illegal (but about which he didn’t call the FBI). Mike Flynn continued to try to implicate Hillary Clinton in his efforts to get Fethullah Gulen arrested on behalf of his secret foreign paymasters, all while getting intelligence briefings. And Cohen moved to collect on reimbursements for the illegal campaign donations he made to silence some of Trump’s former sex partners.

This is just the public record, presented in warrant applications being progressively unsealed by media outlets in court dockets. There may be an entirely asynchronistic counterintelligence investigation conducted using intelligence authorities. Though given the FBI’s actions, it seems highly unlikely, given their apparent ignorance of key details, that’s the case.

Which is to say that the public record supports Peter Strzok’s claims that the investigation lagged what a normal counterintelligence investigation might have. And all the while the investigation slowly moved to uncover the secrets that George Papadopoulos and Mike Flynn and Michael Cohen and Paul Manafort and (allegedly) Roger Stone lied to cover up, those men continued to engage in sketchy behavior, adding more reason to pursue the investigation.

As I disclosed last July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

Timeline

March 2016: Start date on spreadsheet of communications between Konstantin Kilimnik and Paul Manafort (possible parallel construction, though available portions of chart do not show whether contacts include phone calls).

April 26, 2016: Joseph Mifsud tells George Papadopoulos the Russians have Hillary emails that will be damaging to her that they plan to release to help Trump.

May 6, 2016: Papadopoulos speaks to Downer aide Erica Thompson; this is the day the Mueller Report says Papadopoulos first shared news that the Russians had emails.

May 10, 2016: Papadopoulos tells Alexander Downer some of what Mifsud told him.

June 14, 2016: DNC announces Russia has hacked them.

June 15, 2016: Guccifer 2.0 claims credit for the DNC hack.

June – July 2016: Facebook provides FBI two warnings about GRU using social media to conduct an espionage operation.

July 1, 2016: Christoper Steele writes Bruce Ohr email about “our favorite business tycoon,” referring to Oleg Deripaska, part of an effort to pitch Deripaska as a source to the US.

July 7, 2016: Via email, Paul Manafort offers private briefings on the campaign for Oleg Deripaska.

July 19, 2016: Steele dossier allegations about Carter Page trip to Moscow

July 25, 2016: Stone gets BCCed on an email from Charles Ortel that shows James Rosen reporting “a massive dump of HRC emails relating to the CF in September;” Stone now claims this explains his reference to a journalist go-between. Stone emails Jerome Corsi and tells him, “Get to [Assange]. At Ecuadorian Embassy in London and get the pending Wikileaks emails . . . they deal with Foundation, allegedly.” Corsi forwards that email to Ted Malloch.

July 27: Paul Manafort struggles while denying ties to Russia, instead pointing to Hillary’s home server.

July 27, 2016: In a press conference, candidate Trump:

  • Asks Russia to find Hillary’s missing emails
  • Lies about having ongoing business discussions with Russia
  • Suggests he may have ordered someone to reach out to foreign countries (which he seems to have done with Flynn)
  • Suggests he’s considering recognizing Russia’s seizure of Crimea

Both before and after this press conference, Trump asked aides — including Flynn and Gates, and probably Stone to go find the emails.

July 28, 2016: Paul Manafort gets a refinance in exchange for a campaign position for Steve Calk; this has led to a criminal conviction for Manafort and a bribery charge for Calk.

July 30, August 1, 2016: Papadopoulos and Sergei Millian meet in NYC; Millian invites Papadopoulos to two energy conferences.

Before July 30, 2016: First Steele dossier allegation that Manafort managed cooperation with Russia.

July 30: Bruce and Nellie Ohr meet with Christopher Steele; they talk about two claims from dossier, that “a former head of the Russian Foreign Intelligence Service, the SVR, had stated to someone…that they had Donald Trump over a barrel,” and that Carter Page had met with high level Russians while in Moscow. They also discuss Oleg Deripaska’s efforts to get evidence Manafort owes him money (though not, according to Ohr’s notes, the claim that Manafort was coordinating an election-year operation with Russia) and Russian doping. Ohr passes the information on to Andrew McCabe and Lisa Page.

July 31, 2016: FBI opens investigation into Papadopoulos and others based on Australian tip.

July 31, 2016: GAI report on From Russia with Money claiming Viktor Vekselberg’s Skolkovo reflects untoward ties; it hints that a greater John Podesta role would be revealed in her deleted emails and claims he did  not properly disclose role on Joule board when joining Obama Administration. Stone emails Corsi, “Call me MON,” and tells him to send Malloch to see Assange.

August 1, 2016: Steve Bannon and Peter Schweitzer publish a Breitbart version of the GAI report.

August 2, 2016: Paul Manafort meets with Konstantin Kilimnik to talk 1) how the campaign plans to win MI, WI, PA, and MN 2) how to carve up Ukraine 3) how to get paid by his Ukrainian and Russian paymasters. Corsi writes Stone, “Word is friend in embassy plans 2 more dumps. One shortly after I’m back. 2nd in Oct. Impact planned to be very damaging.”

August 4, 2016: Stone flip-flops on whether the Russians or a 400 pound hacker are behind the DNC hack and also tells Sam Nunberg he dined with Julian Assange.

August 5, 2016: Manafort puts Calk on an advisory committee. Stone column in Breitbart claiming Guccifer 2.0 is individual hacker. Page texts Strzok that, “the White House is running this,” which is a reference to the larger Russian active measures investigation.

August 7, 2016: Stone starts complaining about a “rigged” election, claims that Nigel Farage had told him Brexit had been similarly rigged.

August 8, 2016: CrowdStrike report on hack of Democrats (referred to here).

August 10, 2016: Steele dossier reports on Mike Flynn RT meeting that had already been publicly reported.

August 12, 2016: Guccifer 2.0 publicly tweets Stone.

August 10, 2016: Manafort tells his tax preparer that he would get $2.4 million in earned income collectable from work in Ukraine in November.

August 14, 2016: NYT publishes story on secret ledgers. Corsi would later claim (falsely) to have started research in response to NYT story.

August 15, 2016: Papadopoulos follows up with Sam Clovis about a September 2016 meeting with Russia. Manafort and Gates lie to the AP about their undisclosed lobbying, locking in claims they would make under oath later that fall. In response to NYT story on Manafort’s graft, Stone tweets, “@JohnPodesta makes @PaulManafort look like St. Thomas Aquinas Where is the @NewYorkTimes?” Strzok loses an argument with McCabe and Page about aggressively investigating the Trump leads; afterwards he texts Page, “I want to believe the path you threw out for consideration in Andy’s office—that there’s no way he gets elected—but I’m afraid we can’t take that risk. It’s like an insurance policy in the unlikely event you die before you’re 40….”

August 17, 2016: Trump’s first intelligence briefing. While working as an unregistered agent of Turkey, Mike Flynn accompanies Trump to his intelligence briefing.

August 17, 2016: AP publishes story on Manafort’s unreported Ukraine lobbying, describing Podesta Group’s role at length.

August 19, 2016: Paul Manafort resigns from campaign in part because he was not forthright about his ties to Russia/Ukraine.

August 21, 2016: Roger Stone tweets, it will soon be Podestas’ time in the barrel.

August 23, 2016: Sergei Millian offers Papadopoulos “a disruptive technology that might be instrumental in your political work for the campaign.”

August 24, 2016: CrowdStrike report on hack of Democrats (referred to here).

September 1, 2016: Stefan Halper meets with Sam Clovis.

September 2, 2016: Halper reaches out to Papadopoulos. Lisa Page texts Peter Strzok that “POTUS wants to know everything we are doing;” per her sworn testimony, the text is a reference to the larger Russian investigation.

September 12: Following further reporting in the Kyiv Post, Konstantin Kilimnik contacts Alex Van der Zwaan in attempt to hide money laundering to Skadden Arps.

September 13, 2016: DOJ starts inquiring about Manafort obligation to register under FARA.

September 13-15, 2016: Papadopoulos meets with Stefan Halper and Azra Turk in London. He believes Halper records his answer to the emails question, including his remark it would “treason.”

Mid-September: FBI has opened sub-inquiries into Page and (probably) three other people linked to Trump, including Papadopoulos and probably Manafort and Flynn.

September 19, 2016: As part of his work for Turkey, Flynn meets with Turkish Foreign Minister Mevlut Cavusoglu and Turkish Energy Minister (and Erdogan son-in-law) Berat Albayrak to discuss how to get Fethullah Gulen extradited. After meeting, James Woolsey informs Joe Biden.

September 24, 2016: Trump campaign severs all ties with Carter Page because of his suspect ties to Russia.

Early October 2016: Trump campaign dismisses Papadopoulos in response to Russian-friendly Interfax interview he did.

October 6, 2016: Corsi repeats the Joule/GAI claims.

October 7,  2016: Manafort gets Calk to increase the loan still further. WikiLeaks begins releasing Podesta emails right after Access Hollywood video drops. Steve Bannon associate tells Stone, “well done.”

October 11, 2016: Release of Podesta email allegedly backing Joule story (December 31, 2013 resignation letter, January 7, 2014 severance letters).

October 14, 2016: While working as unregistered agent of Turkey, Flynn plans to launch FBI investigation into Fethulah Gulen by alleging ties to Clinton Foundation and Campaign.

October 17, 2016: Michael Cohen forms Essential Consultants LLC.

October 18, 19, 20, 2016: Steele dossier reports on Michael Cohen role in operation.

October 21, 2016: DOJ applies for FISA order on Carter Page (Jim Comey and Sally Yates approve it). Manafort emails Kushner proposing to call Clinton “the failed and corrupt champion of the establishment” based on using WikiLeaks’ leaks. “Wikileaks provides the Trump campaign the ability to make the case in a very credible way – by using the words of Clinton, its campaign officials and DNC members.”

October 26, 2016: Cohen opens bank account for Essential Consultants, claiming it will be for his consulting with domestic clients, uses it to pay Stormy Daniels $130,000 to prevent her from sharing true information about Trump.

October 30, 2016: Giorgi Rtslchiladze texts Michael Cohen to tell him he has stopped the flow of some compromising tapes in Moscow.

November 5, 2016: Manafort predicted Hillary would respond to a loss by, “mov[ing] immediately to discredit the [Trump] victory and claim voter fraud and cyber-fraud, including the claim that the Russians have hacked into the voting machines and tampered with the results.”

November 8, 2016: Mike Flynn publishes op-ed for which Turkey paid almost $600,000, without disclosure, thereby serving as an unregistered agent of a foreign government; Steve Calk approves $9.5 million to Manafort he knew wasn’t backed by underwriting. Michael Cohen starts contacting Andrew Intrater regularly.

November 9, 2016: Papadopoulos arranges to meet Millian to discuss business opportunities with Russian “billionaires who are not under sanctions.”

November 10, 2016: Obama warns Trump against picking Mike Flynn as National Security Advisor; Mike Flynn gets his third payment for working as an unregistered agent of Turkey.

November 11, 2016: Calk asks his loan officer to call Manafort to find out if he’s under consideration for Secretary of Treasury.

November 14, 2016: Calk gives Manafort a list of potential roles in the Trump Administration; Manafort claims he is “involved directly” in the Transition; Papadopoulos and Millian meet in Chicago. Carter Page applies for a job in the Administration.

November 16, 2016: Calk’s bank closes on Manafort’s loan.

November 18, 2016: Elijah Cummings warns Mike Pence about Mike Flynn.

November 30, 2016: Manafort asks Jared Kushner to get Calk appointed Secretary of the Army, in response to which Kushner said he was “on it!”

December 8, 2016: Kilimnik raises plan to carve up Ukraine again in (probably foldered) email to Manafort; he also reports, “Carter Page is in Moscow today, sending messages he is authorized to talk to Russia on behalf of DT on a range of issues of mutual interest, including Ukraine.”

December 13, 2016: Steele dossier reports Michael Cohen contributed money for hackers.

December 15, 2016: Manafort arranges Calk interview for Under Secretary of the Army.

December 22, 2016: Calk directs his loan officer to approve a further $6.5 million loan to Manafort because he’s “influential.”

December 29, 2016: Flynn convinces Kislyak to hold off on retaliating for sanctions.

December 31, 2016: Kislyak tells Flynn they’ve held off because of Trump’s wishes.

January 3, 2017: Loretta Lynch approves procedures authorizing the sharing of NSA EO 12333 data with other intelligence agencies.

January 4, 2017: Manafort signs new $6.5 million loan.

January 5, 2017: IC briefs Obama on Russian investigation; possible unmasking of Flynn’s name in Sergei Kislyak transcripts in attempt to learn why Russians changed their response to sanctions.

January 6, 2017: Comey, James Clapper, John Brennan, and Mike Rogers brief Trump on Russian investigation.

January 10, 2017: Calk interviews for Under Secretary of the Army job. Intrater emails Cohen about the Russian Union of Industrialists and Entrepreneurs, referencing Victor Vekselberg.

January 12, 2017: Manafort in Madrid at meeting set up by Kilimnik and Boyarkin to “recreate old friendship” with Deripaska; Manafort stated that “need this finished before Jan. 20.”

January 12, 2017: DOJ applies for FISA reauthorization on Carter Page (Jim Comey and Sally Yates approve it).

Before January 15, 2017: Steve Bannon would have been picked up on a FISA intercept targeting Carter Page telling him not to do an appearance on MSNBC.

January 19, 2017: In NYT report that Manafort investigation relies on foreign intercepts (without specifying whether he or others are targeted), he denies the kinds of meetings he had a week earlier. Stone has (probably erroneously) pointed to mention of his name in article to claim he was targeted under FISA.

January 20, 2017: In conjunction with inauguration, Manafort meets with Ukrainian oligarchs and Papadopoulos parties with Millian.

January 24, 2017: FBI interview of Mike Flynn.

January 27, 2017: FBI interview of George Papadopoulos.

Between January 27 and February 16, 2017: FBI asks if Papadopoulos is willing to wear a wire targeting Mifsud, suggesting they believed his comments in the first interview.

February 10, 2017: FBI interviews Mifsud in DC.

February 16, 2017: By his second FBI interview, FBI still has not subpoenaed logs from George Papadopoulos’ Skype and Facebook accounts (because they don’t know about Ivan Timofeev).

February 17, 2017: Papadopoulos attempts to delete his Facebook account.

February 23, 2017: Papadopoulos gets a new phone.

February 26, 2017: Manafort and Kilimnik meet in Madrid and again discuss Ukraine plan.

March 2017: Carter Page interviewed five times by FBI.

March 5, 2017: White House Counsel learns the FBI wants transition-period records relating to Flynn.

March 7, 2017: Flynn submits a factually false FARA registration.

March 10, 2017: FBI interviews Carter Page.

March 16, 2017: Richard Burr tells White House Counsel FBI is investigating Flynn, Manafort (though not yet for his campaign activities), Carter Page, George Papadopoulos, and Roger Stone. FBI interviews Carter Page.

March 20, 2017: Jim Comey confirms investigation.

March 30, 2017: FBI interviews Carter Page.

March 31, 2017: FBI interviews Carter Page.

Early April 2017: DOJ obtains reauthorization for FISA order on Carter Page (Comey and Dana Boente approve it).

May 7, 2017: Cohen has meeting with Vekselberg at Renova.

May 9, 2017: Jim Comey fired, ostensibly for his treatment of Hillary Clinton investigation; within days Trump admits it was because of Russian investigation.

May 17, 2017: Appointment of Mueller; Rosenstein includes Carter Page, Paul Manafort, and George Papadopoulos along with Flynn in the list of Trump officials whose election year ties might be investigated.

May 18, 2017: Strzok texts Page that, “my gut sense and concern there’s no big there there” in the Russian investigation.

May 27, 2017: Application for search of Manafort’s storage compartment does not mention June 9 meeting.

May 28, 2017: Lisa Page assigned to Mueller’s team.

Early June 2017: Peter Strzok assigned to Mueller’s team.

June 2017: Federal agents review Michael Cohen’s bank accounts.

June 6, 2017: Mueller team still not certain whether they would search on Section 702 materials.

June 16, 2017: Trump campaign tells Mueller GSA does not own Transition materials.

June 21, 2017: FBI sends a preservation order to Microsoft for Michael Cohen’s Trump Organization account.

June 29, 2017: DOJ obtains reauthorization for FISA order on Carter Page (Andrew McCabe and Rod Rosenstein approve it).

July 7, 2017: First date for warrants from Mueller-specific grand jury. (D Orders, PRTT)

July 12, 2017: Mueller subpoenas people and documents pertaining to June 9 meeting.

July 14, 2017: FBI sends a preservation order to Microsoft for all Trump Organization accounts.

July 15, 2017: Lisa Page leaves Mueller team.

July 18, 2017: Application for search of Michael Cohen’s Gmail reflects suspicions that Essential Consulting account used for payments associated with unregistered lobbying for Ukraine “peace” deal (name of AUSA approving application redacted); warrant obtains email from January 1 through present.

July 19, 2017: Peter Strzok interviewed, apparently to capture events surrounding Flynn firing.

July 20 and 25, 2017: FBI sends grand jury subpoenas for call records related to Michael Cohen Trump Organization account.

July 25, 2017: Application for search of Manafort’s condo includes request for materials relating to June 9 meeting; does not mention election year meetings with Kilimnik.

July 27, 2017: Early morning search of Paul Manafort’s condo. Horowitz tells Mueller about Page-Strzok texts. George Papadopoulos arrested.

July 28, 2017: Strzok moved off Mueller team.

August 2017: First search warrant obtained against Roger Stone, focused on CFAA.

August 1, 2017: Application for search warrant for Cohen’s Trump Organization email account adds Bank Fraud to suspected crimes; Mueller signed the nondisclosure request.

August 2, 2017: Rosenstein memo codifies scope to include Carter Page, Paul Manafort, and George Papadopoulos already under investigation, adds the Manafort financial crimes, the allegations that Papadopoulos had acted as an unregistered agent of Israel, and four allegations against Michael Flynn.

August 7, 2017: FBI obtains search warrant on Cohen’s Apple ID.

August 11, 2017: Strzok receives his exit clearance certificate from Mueller’s team.

August 17, 2017: Application for Manafort’s [email protected] email includes predication (probably Russian investigation related) unrelated to his financial crimes. (A warrant for Rick Gates and Konstantin Kilimnik’s DMP emails submitted that day does not include predication outside of the lobbying.)

August 17, 2017: Andrew McCabe interviewed.

August 23, 2017: Mueller requests Transition emails and devices for nine Transition officials from GSA.

August 30, 2017: Mueller requests Transition emails and devices for an additional four Transition officials.

September 19, 2017: CNN reports that FBI obtained a FISA warrant on Paul Manafort (though claims that search of storage facility happened under FISA, not criminal, warrant).

October 20, 2017: Rosenstein expands scope to include Michael Cohen, Rick Gates, Roger Stone, Don Jr, and at least one other person, plus Jeff Sessions’ lies to Congress.

November 13, 2017: FBI obtains Cohen’s Gmail going back to June 1, 2015 (prior warrants covered January 1, 2016 to present) and personal email hosted by 1&1.

January 19, 2018: Trump signs 702 reauthorization without any new protections on back door searches.

January 29, 2018: By this date, White House had turned over 20,000 pages of records to Mueller covering (see this post for more background):

  • White House response to DOJ concerns about Mike Flynn, his resignation, and White House comments about Jim Comey
  • White House communications about campaign and transition communications with Manafort, Gates, Gordon, Kellogg, Page, Papadopoulos, Phares, Clovis, and Schmitz
  • Records covering Flynn’s campaign and transition communications with Kislyak and other Russian officials, as well as the May 10, 2017 meeting
  • Records relating to the June 9 meeting
  • Records pertaining to Jim Comey’s firing

Between that date and June 5, 2018, the White House also turned over:

  • McGahn’s records pertaining to Flynn and Comey firings
  • White House Counsel documents pertaining to research on firing Comey before it happened
  • Details on the Bedminster meeting in advance of Comey’s firing
  • Details on McCabe’s communications with Trump right after he fired Comey
  • Details on the Trump’s actions during the summer of 2017 during events pertaining to obstruction

March 2018: Mueller subpoenas Trump Organization.

March 9, 2018: Application for search of five AT&T phones includes predication (and, apparently, phones) unrelated to Paul Manafort.

April 9, 2018: Michael Cohen raid.

June 5, 2018: White House turns over some visitor log information.

August 3, 2018: Three warrants against Stone in DC, focused on CFAA (per May 14, 2019 ABJ minute order).

August 8, 2018: Search warrant against Stone in DC, focused on CFAA (per May 14, 2019 ABJ minute order).

Around January 25, 2019: One SDNY, two SDFL, and one DC warrant against Stone focused on false statements.

January 25, 2019: Roger Stone raid and arrest.

February 2019: One DC warrant against Stone focused on CFAA.

Did Some Republican in Congress Leak Details of the Mueller Report to Roger Stone?

/6 Comments/in , /by

There’s a passage from a recent Roger Stone filing I’ve been puzzling over. In a motion asking for discovery on selective prosecution — an effort that started out by arguing no one else had been prosecuted for false statements to Congress before that became ridiculous — Stone claims that

Yet, he was ruled out as a conspirator with the Russian state and WikiLeaks before his transcript from HPSCI was transmitted.

This effort parallels an effort to get the whole Mueller Report and this motion asks for all the declination memos on top of that.

Prosecuting Stone because of his arbitrary classification requires discovery, including the declination memos sent to the Attorney General, so that it may be determined who the government thinks lied to Congress or the Special Counsel, but were not prosecuted.

The claim that Stone was ruled out as a co-conspirator with Russia or WikiLeaks is probably true (though not necessarily all that helpful for his case). I’m just trying to figure out how he knows that, if he does. It seems there are four possibilities:

  1. His lawyers, who are fairly careless and who have made false claims in other briefs, are just making this up
  2. He got something in discovery that makes this clear
  3. He’s basing this off Jerome Corsi’s public claims
  4. Someone who has seen an unredacted copy of the Mueller Report (which currently includes the White House and at least 7 of the 8 Republicans who had been given an opportunity to read it before yesterday) told him what those passages of the report say
  5. He learned of this decision in real time, via reporting to the White House and then some channel from the White House

As noted, his lawyers have not been above making shit up, so it’s possible this is what this claim is. But it feels too specific for that.

It’s also possible he got something in discovery to support this claim, except the prosecutors are fighting to provide precisely this kind of information to him in their fight against releasing the Mueller Report.

Such an assertion could be intuited from Jerome Corsi’s crazed rants. Corsi has said that he believes the true source of his/their knowledge that WikiLeaks would release John Podesta’s emails was the cornerstone to Mueller’s “collusion” case (though of course he was assessing conspiracy, as Stone correctly notes here.

It’s certainly possible this is reflected in the less redacted Mueller Report, which would explaining the timing of this claim, which by my reading is new in this filing. Republicans in Congress have tampered with the criminal cases against Trump’s people on at least two occasions (when Richard Burr told the White House who had been targeted, and whoever reached out to Mike Flynn to discourage his cooperation). Given DOJ’s warnings about how sensitive the report is, it would be fairly damning if one of just 5 Republicans who had seen it already ran to Stone to tell him what’s in it. (Those 5 are: Mitch McConnell, Richard Burr, Lindsey Graham, Kevin McCarthy, and Doug Collins; it’s not clear whether Devin Nunes has reviewed the report yet.)

I’m most interested whether Stone learned in real time — perhaps last fall — that Mueller had decided not to charge him in a conspiracy with WikiLeaks and Russia. That would be particularly interesting given that Paul Manafort actually told what resembles the truth about the campaign’s outreach, through Stone, to WikiLeaks.

Amy Berman Jackson currently has unredacted parts of the Mueller Report pertaining to Stone, so if this information does come from leaks about the Mueller Report, she may recognize that.

As I said, even if Mueller decided not to charge Stone in a conspiracy because, with the witness tampering charges, he may face the same kind of sentence without some of the evidentiary hurdles, it doesn’t amount to selective prosecution.

But Stone sure seems to have a specific idea of what he’s looking for, even if it only helps his (and Trump’s) political case, not his criminal one.

Update: Corrected the number of Republicans known to have reviewed the report to 5.

As I disclosed last July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post. 

Dan Coats Still Refusing to Provide the Evidence that Russia Didn’t Affect the Election

/75 Comments/in /by

Last month, I noted a troubling exchange between Martin Heinrich, Dan Coats, and Richard Burr in the Global Threats Hearing.

Martin Heinrich then asked Coats why ODNI had not shared the report on election tampering even with the Senate Intelligence Committee.

Heinrich: Director Coats, I want to come back to you for a moment. Your office issued a statement recently announcing that you had submitted the intelligence community’s report assessing the threats to the 2018 mid-term elections to the President and to appropriate Executive Agencies. Our committee has not seen this report. And despite committee requests following the election that the ODNI brief the committee on any identified threats, it took ODNI two months to get a simple oral briefing and no written assessment has yet been provided. Can you explain to me why we haven’t been kept more fully and currently informed about those Russian activities in the 2018–

Chairman Richard Burr interrupts to say that, in fact, he and Vice Chair Mark Warner have seen the report.

Burr: Before you respond, let me just acknowledge to the members that the Vice Chairman and I have both been briefed on the report and it’s my understanding that the report at some point will be available.

Coats then gives a lame excuse about the deadlines, 45 days, then 45 days.

Coats: The process that we’re going through are two 45 day periods, one for the IC to assess whether there was anything that resulted in a change of the vote or anything with machines, uh, what the influence efforts were and so forth. So we collected all of that, and the second 45 days — which we then provided to the Chairman and Vice Chairman. And the second 45 days is with DHS looking, and DOJ, looking at whether there’s information enough there to take — to determine what kind of response they might take. We’re waiting for that final information to come in.

After Coats dodges his question about sharing the report with the Committee, Heinrich then turns to Burr to figure out when they’re going to get the information. Burr at least hints that the Executive might try to withhold this report, but it hasn’t gotten to that yet.

Heinrich: So the rest of us can look forward — so the rest of us can then look forward to reading the report?

Coats: I think we will be informing the Chairman and the Vice Chairman of that, of their decisions.

Heinrich: That’s not what I asked. Will the rest of the Committee have access to that report, Mr. Chairman?

[pause]

Heinrich: Chairman Burr?

Burr; Well, let me say to members we’re sort of in unchartered ground. But I make the same commitment I always do, that anything that the Vice Chairman and myself are exposed to, we’ll make every request to open the aperture so that all members will be able to read I think it’s vitally important, especially on this one, we’re not to a point where we’ve been denied or we’re not to a point that negotiations need to start. So it’s my hope that, once the final 45-day window is up that is a report that will be made available, probably to members only.

Coming as it did in a hearing where it became clear that Trump’s spooks are helpless in keeping Trump from pursuing policies that damage the country, this exchange got very little attention. But it should!

DOJ missed its 45 day plus 45 day deadline of reporting whether any election tampering had had an effect. But just by one day. The day after their deadline, the Big Dick Toilet Salesman Matt Whitaker and serial liar Kirstjen Nielsen gave Trump a report claiming that any tampering had not had any impact on the election.

Although the specific conclusions within the joint report must remain classified, the Departments have concluded there is no evidence to date that any identified activities of a foreign government or foreign agent had a material impact on the integrity or security of election infrastructure or political/campaign infrastructure used in the 2018 midterm elections for the United States Congress. This finding was informed by a report prepared by the Office of the Director of National Intelligence (ODNI) pursuant to the same Executive Order and is consistent with what was indicated by the U.S. government after the 2018 elections.

While the report remains classified, its findings will help drive future efforts to protect election and political/campaign infrastructure from foreign interference.

Then, today, CyberComm boasted that that they had helped deter Russia during the midterms.

Senators from both political parties on Thursday praised the military’s cyber force for helping secure last year’s midterm elections, with one suggesting it was largely due to U.S. Cyber Command that the Russians failed to affect the 2018 vote.

“Would it be fair to say that it is not a coincidence that this election went off without a hitch and the fact that you were actively involved in the protection of very important infrastructure?” Sen. Mike Rounds (R-S.D.) asked Gen. Paul Nakasone, the command’s leader, at a hearing of the Senate Armed Services Committee.

Military officials have said new authorities, approved over the last year, enabled CyberCom to be more aggressive — and effective — in what they privately say was an apparent success. Nakasone, who also heads the National Security Agency, stopped short of saying it was CyberCom that made the difference, telling Rounds that safeguarding the election was the agencies’ “number-one priority.”

But ODNI is still not providing SSCI — the people who are supposed to see such evidence — proof. Heinrich wrote Dan Coats a letter, signed by every member of SSCI,

Your office a statement in December that you had submitted the Intelligence Committee’s report assessing threats to the 2018 elections to the president and appropriate executive agencies. This month, the acting Attorney General and the Secretary of Homeland Security announced they had submitted their joint report evaluating the impact of any foreign interference on election infrastructure for the infrastructure of political organizations during the midterm elections.

While the agencies provided brief unclassified summaries of the reports’ findings, the Select Committee on Intelligence has not been provided either report. We request that you provide to all Committee Members and cleared staff both classified reports required by EO 13848 as soon as possible. Those reports are necessary for the Committee to meet its mission and charter to conduct vigorous oversight over the intelligence and intelligence-related activities of the United States Government.

They’re clearly hiding something. The question is whether it’s that Trump didn’t try to prevent tampering, or that some of the efforts — included the known effort to hack Claire McCaskill — actually did have an effect.

 

On SSCI’s Investigation: Manafort “Conspired” Whether or Not Trump Also “Colluded”

/187 Comments/in , /by

I’d like to point out something about this NBC report headlined, “Senate has uncovered no direct evidence of conspiracy between Trump campaign and Russia,” but instead showing,

investigators disagree along party lines when it comes to the implications of a pattern of contacts they have documented between Trump associates and Russians — contacts that occurred before, during and after Russian intelligence operatives were seeking to help Donald Trump by leaking hacked Democratic emails and attacking his opponent, Hillary Clinton, on social media.

I sometimes beat up on Ken Dilanian and I don’t mean to do so here. Putting the headline and lead aside, his report shows the disagreement here, and he even references Mark Warner’s recent focus on Paul Manafort’s sharing of polling data with Konstantin Kilimnik (though it’s not clear he asked Richard Burr about the report).

After it recently emerged that Trump campaign chairman Paul Manafort shared campaign polling data with a man the FBI says is linked to Russian intelligence, Warner called that the most persuasive evidence yet of coordination.

“This appears as the closest we’ve seen yet to real, live, actual collusion,” he said on CNN.

No evidence has emerged, however, linking the transfer of polling data to Trump.

Natasha Bertrand says the report soft-pedals the Democrats’ belief.

Senate Intelligence Committee aide tells me, re: NBC story, that right now there is “a common set of facts” that the panel is working with, “and a disagreement about what those facts mean.” They add: “We are closer to the end than the beginning, but we’re not wrapping up.”

But I think something else is going on, in addition to any downplaying Democrats’ views.

It’s that the report shifts back and forth between “conspiracy” and “collusion.”

After two years and 200 interviews, the Senate Intelligence Committee is approaching the end of its investigation into the 2016 election, having uncovered no direct evidence of a conspiracy between the Trump campaign and Russia, according to both Democrats and Republicans on the committee.

[snip]

“If we write a report based upon the facts that we have, then we don’t have anything that would suggest there was collusion by the Trump campaign and Russia,” said Sen. Richard Burr, R-N.C., the chairman of the Senate Intelligence Committee, in an interview with CBS News last week.

[snip]

“We were never going find a contract signed in blood saying, ‘Hey Vlad, we’re going to collude,'” one Democratic aide said.

[snip]

House Republicans announced last year they had found no evidence of collusion, but their report came under immediate criticism as a highly partisan product that excluded Democrats.

[snip]

“Senator Richard Burr, The Chairman of the Senate Intelligence Committee, just announced that after almost two years, more than two hundred interviews, and thousands of documents, they have found NO COLLUSION BETWEEN TRUMP AND RUSSIA!” Trump tweeted Sunday. “Is anybody really surprised by this?”

[snip]

“This [sharing polling data] appears as the closest we’ve seen yet to real, live, actual collusion,” he said on CNN.

[snip]

The final Senate report may not reach a conclusion on whether the contacts added up to collusion or coordination with Russia, Burr said.

Democrats told NBC News that’s a distinct possibility.

“What I’m telling you is that I’m going to present, as best we can, the facts to you and to the American people,” Burr told CBS. “And you’ll have to draw your own conclusion as to whether you think that, by whatever definition, that’s collusion.”

The story promises to talk about conspiracy, but then ends up talking about “collusion,” going so far as quoting Burr saying you need to draw your own conclusion about what you think the definition of “collusion” is.

That’s an important distinction, especially in a report that talks about Paul Manafort, not least because Manafort has already pled guilty to conspiring with Konstantin Kilimnik, albeit for covering up crimes in 2018 rather than committing them in 2016.

And while Burr complains we can’t know his or any of the other flunkies’ motives, Andrew Weissmann made it clear that Manafort told the grand jury he didn’t have just one motive when he handed highly detailed, recent polling data to Konstantin Kilimnik to be handed over to his Ukrainian and Russian paymasters.

And I think that in the grand jury, Mr. Manafort said that from his perspective, [sharing polling data] which he admitted at that point was with — he understood that it was going to be given by [redacted] to the [redacted] and to Mr. redacted 9 character name], both. That from his perspective, it was — there was no downside — I’m paraphrasing — it was sort of a win-win. That there was nothing — there was no negatives.

[snip]

My answer, with respect to the Court’s question about what it is — what the defendant’s intent was in terms of what he thought [redacted] I was just trying to answer that question, even though that’s not one of the bases for saying there was a lie here. And so I was just trying to answer that question. And what I meant by his statement that there’s no downside, is that can you imagine multiple reasons for [redacted]. And I think the only downside —

THE COURT: You meant no downside to him?

MR. WEISSMANN: Yes.

THE COURT: You weren’t suggesting that there was nothing — there’s no scenario under which this could be a bad thing?

MR. WEISSMANN: Oh, sorry. Yes. I meant there was no downside — Mr. Manafort had said there was no downside to Mr. Manafort doing it.

[snip]

MR. WEISSMANN: And meaning all of this is a benefit. The negative, as I said, was it coming out that he did this.

This August 2, 2016 data hand-off occurred in the specific context of Manafort trying to get whole on his $20 million debt to Oleg Deripaska. The data was also going to some Ukrainian oligarchs that Manafort expected to pay him $2.4 million in November 2016. And all that’s aside from whether Manafort expected the Russians to do anything with the data that might help Trump.

He was badly underwater, and — according to his grand jury testimony, at least as described by Weissmann — he clandestinely handed off recent detailed polling data to a guy connected to the agency that was still hacking Hillary Clinton, to be shared with a bunch of oligarchs who could help him reverse his financial fortunes.

It seems there’s a conspiracy there one way another. Either Manafort effectively stole Trump’s campaign data and traded it to foreigners for monetary gain. And/or Manafort handed over that data expecting that the campaign would get a thing of value from the foreigners he was sharing it with.

Richard Burr would seem to argue that’s not “collusion” unless Trump knew about it (whether he did is one of the questions Mueller posed to Trump).

But it is a conspiracy, an agreement with Konstantin Kilimnik to commit one or more crimes, right there in the middle of the election season. Whether Mueller will charge it or do something else with it remains to be seen. But it is fairly clearly a conspiracy, down to the clandestine arrivals and departures from the dark cigar lounge.

Ultimately, Burr’s retreat to that word “collusion” is a tell. Because, given the public facts in this case, Republicans should be outraged that Trump’s campaign manager was so disloyal he shared highly sensitive data with potentially malign actors. Republicans should be outraged that Trump’s campaign manager was putting his own financial imperatives ahead of sound campaign practice.

But they’re not. For some reason, Republicans are not squawking about the explanation for this data hand-off that would suggest the campaign didn’t expect to benefit.

As I disclosed last July, I provided information to the FBI on issues related to the Mueller investigation, so I’m going to include disclosure statements on Mueller investigation posts from here on out. I will include the disclosure whether or not the stuff I shared with the FBI pertains to the subject of the post.