Posts

Like the January 6 Investigation, the Mueller Investigation Was Boosted by Congressional Investigations

Midway through an article on which Glenn Thrush — who as far as I recall never covered the Russian investigation and has not yet covered the January 6 investigation — has the lead byline, the NYT claims that it is unusual for a congressional committee to receive testimony before a grand jury investigation does.

The Justice Department has asked the House committee investigating the Jan. 6 attack for transcripts of interviews it is conducting behind closed doors, including some with associates of former President Donald J. Trump, according to people with knowledge of the situation.

The move is further evidence of the wide-ranging nature of the department’s criminal inquiry into the events leading up to the assault on the Capitol and the role played by Mr. Trump and his allies as they sought to keep him in office after his defeat in the 2020 election.

[snip]

The Justice Department’s request for transcripts underscores how much ground the House committee has covered, and the unusual nature of a situation where a well-staffed congressional investigation has obtained testimony from key witnesses before a grand jury investigation. [my emphasis]

That’s simply false. This is precisely what happened with the Mueller investigation, and there’s good reason to believe that DOJ made a decision to facilitate doing the same back in July, in part to avoid some evidentiary challenges that Mueller had difficulties with, most notably Executive Privilege challenges.

First, let’s look at how Mueller used the two Congressional investigations.

At the start, he asked witnesses to provide him the same materials they were providing to Congress. I believe that in numerous cases, the process of complying with subpoenas led witnesses to believe such subpoenas were the only way Mueller was obtaining information. Trump Organization, especially, withheld a number of documents from Mueller and Congress, including direct contacts with Russian officials and a Steve Bannon email referencing Russian involvement in the election. By obtaining a warrant for Trump Transition materials held by GSA and the Trump Organization emails of Michael Cohen hosted by Microsoft, Mueller got records the subjects of the investigation were otherwise hiding. Steve Bannon, too, falsely told Mueller he didn’t use his personal accounts for campaign business, only to discover Mueller had obtained those records by the time of his October 2018 interview. Surprising witnesses with documents they had been hiding appears to have been one of the ways Mueller slowly coaxed Bannon and Cohen closer to the truth.

We should assume for key figures in the vicinity of Ali Alexander and John Eastman, the same is happening with the January 6 investigation: the very people who’ve been squealing about complying with subpoenas or call records served on their providers are likely ones DOJ obtained covert warrants for.

Then there are the prosecutions that arose entirely out of Congressional interviews. There were three Mueller prosecutions that arose out of Committee investigations.

Perhaps the most interesting was that of Sam Patten — whose interview materials are here. He had an interview with SSCI on January 5, 2018, where he appears to have lied about using a straw donor to buy Inauguration tickets for Konstantin Kilimnik. By March 20, the FBI attempted their first interview of Patten, after which Patten deleted some emails about Cambridge Analytica. And when Mueller did interview Patten on May 22, they already had the makings of a cooperation deal. After getting Patten to admit to the straw purchase and also to violating FARA — the latter of which he would plead guilty months later, on August 31 — Patten then provided a ton of information about how Kilimnik worked and what he had shared with Patten about his role in the 2016 operation, much of which still remained sealed as part of an ongoing investigation in August 2021. Patten had two more interviews in May then appeared before the grand jury, at which he shared more information about how Kilimnik was trying to monitor the investigation. He had two more interviews before pleading guilty, then at least two more after that.

Not only did Patten share information that likely served as part of a baseline for an understanding about Russia’s use of Ukraine to interfere in US politics and provided investigators with an understanding of what the mirror image to Paul Manafort looked like, but this remained secret from much of the public for three months.

It’s less clear precisely when SSCI shared Cohen’s lies with Mueller. But in the same period, both Mueller and SDNY were developing parallel investigations of him. But by the time Cohen pled guilty in SDNY (also in August 2018), Mueller had the evidence to spend almost three months obtaining information from Cohen as well before he entered into a separate plea agreement with Mueller in which he admitted to the secret communications with the Kremlin that he and Trump lied to hide.

Meanwhile, HPSCI’s much more hapless investigation proved a way to get a limited hangout prosecution of Roger Stone. By May 2018, when Mueller developed evidence showing not just ways that Stone was obstructing his own investigation but also how Stone attempted to craft lies to tell to the Committee — coordinated with Jerome Corsi and reliant on threats to Randy Credico — it provided a way to prosecute Stone while protecting Mueller’s ongoing investigation into whether Stone conspired with Russia.

And by all public appearances at the time, it appeared that Congress was acting while Mueller was not. But that was false (and is probably false now). The entire time during which SSCI and HPSCI were taking steps with Cohen and Stone that would late become really useful to the criminal investigation, Mueller was taking active, albeit covert, steps in his own investigations of the two men (whether he was investigating Patten personally or just Kilimnik is uncertain). Mueller obtained his first warrants against Cohen and Stone in July and August, respectively. But no one knew that until the following spring. That is, Cohen and Stone and everyone else focused on Congress while Mueller got to investigate covertly for another nine months.

We should assume the same kind of thing is happening here. All the more so given the really delicate privilege issues raised by this investigation, including Executive, Attorney-Client, and Speech and Debate. When all is said and done, I believe we will learn that Merrick Garland set things up in July such that the January 6 Committee could go pursue Trump documents at the Archives as a co-equal branch of government bolstered by Biden waivers that don’t require any visibility into DOJ’s investigation. Privilege reviews covering Rudy Giuliani, Sidney Powell, and John Eastman’s communications are also being done. That is, this time around, DOJ seems to have solved a problem that Mueller struggled with. And they did so with the unsolicited help of the January 6 Committee.

Even those of us who’ve been covering DOJ’s January 6 prosecution day-to-day (unlike Thrush) have no way of saying what DOJ has been doing covertly in the last year — though it is public that they’ve been investigating Alex Jones, the purported new thrust of this investigation, since August.

What we know from recent history, however, is that DOJ’s use of Congress’ work in no way suggests DOJ hasn’t been doing its own.

Todd Wilson: The Seditious Conspiracy Grows Branches

Yesterday, Oath Keeper Todd Wilson pled guilty to seditious conspiracy and obstruction. He’s from North Carolina, and while the Sedition Hunters who have followed the Oath Keepers closely had been tracking him and had noticed Ed Vallejo did not redact Wilson’s name on a transcript submitted in Vallejo’s detention fight, Wilson’s information was rolled out just the morning before he pled. He went from being charged to pleading to sedition in a matter of hours.

(In other news, Judge Amit Mehta released Vallejo to home confinement yesterday.)

What we see in statement of offense — and, I suspect, what we’ll see going forward — is DOJ making little-noticed parts of a much broader network visible. As with Georgia Oath Keeper Brian Ulrich’s statement of offense, for example, Wilson’s provides hints of damning discussions that happened at the state level.

In November 24, 2020, in the “NC OK County Leaders” Signal chat, a group member advised, “we all need to be very careful about what we post here . . . While Signal is end-to-end encrypted, it’s always safest to operate under the assumption that someone is monitoring our conversations electronically.”

For sixteen months, the non-specialist focus on the Oath Keepers has been tracking The Stack and those directly associated with it (though Oath Keeper researchers always had a broader focus). But we’re going to increasingly see pieces of this conspiracy that were visible, but not seen, because the spectacle of The Stack attracted most of the attention. Some of those little-seen aspects of the larger network may prove far more important.

One testament to that is that Wilson showed up, but was not noticed, in photos already submitted to the docket in Oath Keeper cases.

Wilson’s presence in the Rotunda is actually one of the tactically most important parts of his statement of offense. Wilson entered the Capitol from the west side and then helped open the East doors from inside.

Even before he entered the building, though, Wilson was one of four people with Stewart Rhodes watching the building as it was first assaulted and he was with Rhodes as the Oath Keeper leader first entered restricted grounds.

Just before 1:30 p.m., in response to a claim by an Oath Keeper affiliate on the “Leadership Intel Chat” that Antifa had breached the Capitol, Rhodes replied: “Nope. I’m right here. These are Patriots.” Minutes later, Rhodes posted to the group that he was standing at the comer of the Capitol building with four people to include Wilson. Rhodes then posted to the “DC OP: Jan 6 21 Signal group chat: Pence is doing nothing* As I predicted.” Rhodes added, “All I see Trump doing is complaining. I see no intent by him to do anything. So the patriots are taking it into their own hands. They’ve had enough.”

[snip]

Shortly after 2:00 p.m., Wilson, Rhodes, and others bypassed barricades and Capitol Police officers, and unlawfully entered the restricted grounds of the Capitol. While advancing, Wilson heard Rhodes proclaim that they were in the midst of a “civil war.” Through plumes of smoke, Wilson could see mobs of people climbing up scaffolding and descending on the Capitol. Rhodes soon directed his followers to meet him at the Capitol. [my emphasis]

From there, Wilson (who escaped notice in part because he wasn’t kitted out like the others and who was a member of the Oath Keepers Intelligence Signal chat) entered the building with the goal of gathering intelligence.

At 2:34 p.m., Wilson entered through the Upper West Terrace Doors of the Capitol—the first of the co-conspirators to breach the building. Wilson was armed with a pocketknife and wore a neck gaiter and beanie hat to mask his appearance. Wilson entered the Capitol with the goal of disturbing the Congressional proceeding and gathering intelligence. [my emphasis]

Four minutes later, Wilson was helping push open the East doors, thereby helping The Stack and others open a second front of the attack.

By 2:38 p.m., Wilson had marched through the Rotunda to the east side of the Capitol where he joined in the center of a mob of people trying to push open the Rotunda Doors from inside of the building. Two Capitol police officers stood in front of the closed doors attempting to keep the mob at bay.

[snip]

At approximately 2:39 p.m., the Rotunda doors were forced open, and a mob of people forcibly entered the Capitol through the doors. The entering mob included fourteen Oath Keepers co-conspirators—many of whom were wearing paramilitary clothing and patches with the Oath Keepers name, logo, and insignia—who had moved up and through the crowd on the east side of the Capitol in a military-style “stack” formation (“Stack One”), Wilson took cell phone video of them entering. The Rotunda Doors and surrounding facade suffered thousands of dollars worth of damage during the attack on the Capitol.

Wilson traveled with the others for a bit and may have accompanied the group that went to hunt down Nancy Pelosi.

Wilson walked through the Capitol for the next fifteen minutes, at times interacting with Dolan, Harrelson, and other co-conspirators who were heading southbound toward the House of Representatives.

The Oath Keepers got to insurrection later than the Proud Boys that day. But Wilson’s path makes the Oath Keepers more central players in the pincer effect seemingly coordinated with the Proud Boys and Alex Jones than previously known.

That’s the tactically important part of his statement of offense.

The part that has attracted the attention, however, is that not long after 5PM, Wilson witnessed Rhodes make a call on speaker phone to someone who could directly access Trump.

At the Phoenix Hotel, Rhodes gathered Wilson and other co-conspirators inside of a private suite. Rhodes then called an individual over speaker phone. Wilson heard, Rhodes repeatedly implore the individual to tell President Trump to call upon groups like the Oath Keepers to forcibly oppose the transfer of power. This individual denied Rhodes’s request to speak directly with President Trump. After the call ended, Rhodes stated to the group, “I just want to fight.”

The Phoenix Park Hotel parking garage, remember, is where Enrique Tarrio met with Rhodes on January 5, more details of which were released Monday in a detention memo for the Proud Boys leader.

Tarrio claims that his surreptitious meeting with Elmer Stuart Rhodes III and others in an underground parking garage was “secondary to why he was there.” Defendant’s Motion at *5 Tarrio’s claim is plainly disproven by video of the event, but even if it were accurate, it misses the point.

First, Tarrio intentionally traveled to the Hall of States Parking Garage near the Phoenix Hotel where he met with others who were planning to remain in Washington, D.C. Tarrio’s decision to do so—even while at risk of violating the D.C. Superior Court stay-away order— demonstrates that even after his arrest, Tarrio remained engaged in planning for January 6. This point is further underscored by Tarrio’s efforts to rejoin encrypted communications and coordinate with Nordean and Biggs about the plans for January 6. Second Superseding Indictment (ECF 305) at ¶¶ 63-67 (Biggs: “I gave Enrique a plan. The one I told the guys and he said he had one.”).

Second, video from the documentary crew shows Tarrio making the conscious decision to travel to an underground downtown parking garage to meet with others rather than departing Washington, D.C., as he had been ordered to do. Specifically, filmmakers captured Tarrio preparing to enter the Phoenix Hotel. The next clip captured Tarrio standing outside the hotel near a truck. When asked what happened, Tarrio told the filmmaker, “We went in [the Phoenix Hotel] and somebody advised us that they’re going to call the cops.” Tarrio was then advised by a female companion, “I think we should leave.” The next clip showed Tarrio in a truck stopped outside the Phoenix Hotel, with Tarrio talking to two people standing on the sidewalk. Tarrio then directed the driver of the truck to travel around the corner from the hotel and enter the Hall of States parking garage—where he offered to pay for the entry. While driving down the ramp into the garage, Tarrio was filmed on a phone call advising the other communicant that he could not come back near the front of the hotel because “they’re already looking out the window.” Tarrio then provided directions to the underground garage. The same two people with whom Tarrio communicated in front of the Phoenix Hotel appeared less than five minutes later in the underground parking garage, along with a handful of others.

Going forward, I suspect it would be ill-advised to assume the word “co-conspirator” assumes the conspiracy in question is entirely self-contained in one militia.

That’s worth keeping in mind when trying to guess whom Rhodes called. The most obvious candidate would be Roger Stone, and I promise you, before this is done, we’ll learn that Stone or his flunkies were involved in similar conversations.

But by the time of this call, per this WaPo piece, Stone was already fleeing. (h/t William Ockham)

Stone had said he expected to attend a meeting with administration officials on pardons that had been pushed back to 6 p.m. because Trump had “ruined the schedule for the day.” But following the riot, Stone and Davis left D.C. for the private flight.

Before Stone leftthe Willard for Dulles around 5 p.m., he paused for a photo in front of a hotel TV showing coverage of the riot.

And Wilson’s statement of offense gives the kind of nod to Mike Flynn that earlier Oath Keeper filings had restricted to Stone.

In December 14, 2020, after reading an article posted by a group member in the “Leadership Intel Chat” titled, “General Flynn warns of unelected ‘tyrants,’ says ‘time for God-fearing Americans to fight,'” Wilson replied, “It is time to fight!” [link added]

And Wilson has ties to people who have ties to Flynn.

So who knows? It could be Stone, it could be Flynn, it could be someone else — like Rudy or Mark Meadows — who genuinely did have direct access to the President.

The point being, we’re very close to a point, if not already there, where this networked conspiracy is going to coalesce such that it’s no longer about discrete militia groups, but it’s about people sitting in hotel rooms blocks away from the direct assault on the Capitol.

Update: Corrected the date of the garage meeting.

Update: The correct name of the hotel is the Phoenix Park.

WaPo Polls Whether Trump Should Be Charged Without Polling His Most Serious Suspected Crimes

WaPo is out with a poll showing that a slight majority of Americans believe Trump should be charged for what they claim was “his role in this incident.”

Except they polled only one of Trump’s suspected crimes, “encourag[ing] his supporters to march to the U.S. Capitol, where the riot followed.” They don’t even describe that as incitement, which is the only way it’d be a crime.

But the poll is largely meaningless because they don’t poll the more egregious crimes for which Trump might be charged. Among the things they didn’t poll, all of which are being investigated, is whether Trump should be charged if he:

  • Raised funds by making claims about election results he knew to be false
  • Badgered Brad Raffensperger to alter enough votes so he could win Georgia
  • Had a role in fraudulent electoral certificates from seven swing states, some of which were submitted to the Archives
  • Entered into an agreement, either directly or through someone like Roger Stone, with the militias that directed the assault at the Capitol
  • Made a request of Mike Pence he knew to be illegal and, when Pence refused, sicced his mob on Pence, threatening the Vice President’s life
  • Deliberately limited law enforcement and National Guard response at the Capitol
  • Dangled pardons (one provided, in Steve Bannon’s case) to get others to help sow the Big Lie
  • Aided and abetted assaults on cops

It is mildly interesting that WaPo found a majority of the country believes Trump should be prosecuted for something that, as described, is probably not a crime. It would be far more interesting to see polling on whether Trump should be prosecuted for any of the potentially far graver crimes there is evidence he committed.

Confirmed: John Durham Has Withheld Discovery That DOJ Already Disproved His Claims of Political Malice

In his reply filing in the fight over what evidence will be submitted at his trial, Michael Sussmann confirmed something I’ve long suspected: John Durham has not provided Sussmann with the discovery Durham would need to have provided to present his own conspiracy theories at trial without risking a major discovery violation.

Were the Special Counsel to try to suggest that Mr. Sussmann and Mr. Steele engaged in a common course of conduct, that would open the door to an irrelevant mini-trial about the accuracy of Mr. Steele’s allegations about Mr. Trump’s ties to Russia—something that, like the Alfa Bank allegations, many experts continue to believe in, and about which the Special Counsel has tellingly failed to produce any significant discovery.

Sussmann dropped this in the filing without fanfare. But it is clear notice that if Durham continues down the path he is headed, he may face discovery sanctions down the road.

I explained why that’s true in these two posts. A core tenet of Durham’s conspiracy theories is that the only reason one would use proven cybersecurity methods to test certain hypotheses about Donald Trump would be for malicious political reasons. Here’s how Durham argued that in his own reply.

As the Government will demonstrate at trial, it was also the politically-laden and ethically-fraught nature of this project that gave Tech Executive-1 and the defendant a strong motive to conceal the origins of the Russian Bank-1 allegations and falsely portray them as the organic discoveries of concerned computer scientists.

There’s no external measure for what makes one thing political and makes another thing national security. But if this issue were contested, I assume that Sussmann would point, first, to truth as a standard. And as he could point out, many of the hypotheses April Lorenzen tested, which Durham points to as proof the project was malicious and political, turned out to be true. They were proven to be true by DOJ. Some of those true allegations involved guilty pleas to crimes, including FARA, explicitly designed to protect national security; another involved Roger Stone’s guilty verdict on charges related to his cover-up of his potential involvement in a CFAA hacking case.

DOJ (under the direction of Trump appointee Rod Rosenstein, who in those very same years was Durham’s direct supervisor) has already decided that John Durham is wrong about these allegations being political. Sussmann has both truth and DOJ’s backing on his side that these suspicions, if proven true (as they were), would be a threat to national security. Yet Durham persists in claiming to the contrary.

Here’s the evidence proving these hypotheses true that Durham has withheld in discovery:

The researchers were testing whether Richard Burt was a back channel to the Trump campaign. And while Burt’s more substantive role as such a (Putin-ordered) attempt to establish a back channel came during the transition, it is a fact that Burt was involved in several events earlier in the campaign at which pro-Russian entities tried to cultivate the campaign, including Trump’s first foreign policy speech. Neither Burt nor anyone else was charged with any crime, but Mueller’s 302s involving the Center for National Interest — most notably two very long interviews with Dmitri Simes (one, updated, two, updated), which were still under investigation in March 2020 — reflect a great deal of counterintelligence interest in the organization.

The researchers were also testing whether people close to Trump were laundering money from Putin-linked Oligarchs through Cyprus. That guy’s name is Paul Manafort, with the assistance of Rick Gates. Indeed, Manafort was ousted from the campaign during the period researchers were working on the data in part to distance the campaign from that stench (though it didn’t stop Trump from pardoning Manafort).

A more conspiratorial Lorenzen hypothesis (at least on its face) was that one of the family members of an Alfa Bank oligarch might be involved — maybe a son- or daughter-in-law. And in fact, German Khan’s son-in-law Alex van der Zwaan was working with Gates and Konstantin Kilimnik in precisely that time period to cover up Manafort’s ties to those Russian-backed oligarchs.

Then there was the suspicion — no doubt driven, on the Democrats’ part, by the correlation between Trump’s request to Russia for more hacking and the renewed wave of attacks that started hours later — that Trump had some back channel to Russia.

It turns out there were several. There was the aforementioned Manafort, who in the precise period when Rodney Joffe started more formally looking to see if there was a back channel, was secretly meeting at a cigar bar with alleged Russian spy Konstantin Kilimnik discussing millions of dollars in payments involving Russian-backed oligarchs, Manafort’s plan to win the swing states, and an effort to carve up Ukraine that leads directly to Russia’s current invasion.

That’s the kind of back channel researchers were using proven cybersecurity techniques to look for. They didn’t confirm that one — but their suspicion that such a back channel existed proved absolutely correct.

Then there’s the Roger Stone back channel with Guccifer 2.0. Again, in this precise period, Stone was DMing with the persona. But the FBI obtained at least probable cause that Stone’s knowledge of the persona went back much further, back to even before the persona went public in June 2016. That’s a back channel that remained under investigation, predicated off of national security crimes CFAA, FARA, and 18 USC 951, at least until April 2020 and one that, because of the way Stone was scripting pro-Russian statements for Trump, might explain Trump’s “Russia are you listening” comment. DOJ was still investigating Stone’s possible back channel as a national security concern well after Durham was appointed to undermine that national security investigation by deeming it political.

Finally, perhaps the most important back channel — for Durham’s purposes — was Michael Cohen. That’s true, in part, because the comms that Cohen kept lying to hide were directly with the Kremlin, with Dmitri Peskov. That’s also true because on his call to a Peskov assistant, Cohen laid out his — and candidate Donald Trump’s — interest in a Trump Tower Moscow deal that was impossibly lucrative, but which also assumed the involvement of one or another sanctioned bank as well as a former GRU officer. That is, not only did Cohen have a back channel directly with the Kremlin he was trying to hide,  but it involved Russian banks that were far more controversial than the Alfa Bank ties that the researchers were pursuing, because the banks had been deemed to have taken actions that threatened America’s security.

This back channel is particularly important, though, because in the same presser where Trump invited Russia to hack his opponent more, he falsely claimed he had decided against pursuing any Trump Organization developments in Russia.

Russia that wanted to put a lot of money into developments in Russia. And they wanted us to do it. But it never worked out.

Frankly I didn’t want to do it for a couple of different reasons. But we had a major developer, particular, but numerous developers that wanted to develop property in Moscow and other places. But we decided not to do it.

The researchers were explicitly trying to disprove Trump’s false claim that there were no ongoing business interests he was still pursuing with Russia. And this is a claim that Michael Cohen not only admitted was false and described recognizing was false when Trump made this public claim, but described persistent efforts on Trump’s part to cover up his lie, continuing well into his presidency.

For almost two years of Trump’s Administration, Trump was lying to cover up his efforts to pursue an impossibly lucrative real estate deal that would have required violating or eliminating US sanctions on Russia. That entire time, Russia knew Trump was lying to cover up those back channel communications with the Kremlin. That’s the kind of leverage over a President that all Americans should hope to avoid, if they care about national security. That’s precisely the kind of leverage that Sally Yates raised when she raised concerns about Mike Flynn’s public lies about his own back channel with Russia. Russia had that leverage over Trump long past the time Trump limped out of a meeting with Vladimir Putin in Helsinki, to which Trump had brought none of the aides who would normally sit in on a presidential meeting, looking like a beaten puppy.

Durham’s failures to provide discovery on this issue are all the more inexcusable given the fights over privilege that will be litigated this week.

As part of the Democrats’ nesting privilege claims objecting to Durham’s motion to compel privileged documents, Marc Elias submitted a declaration describing how, given his past knowledge and involvement defending against conspiracy theory attacks on past Democratic presidential candidates launched by Jerome Corsi and Donald Trump, and given Trump’s famously litigious nature, he believed he needed expertise on Trump’s international business ties to be able to advise Democrats on how to avoid eliciting such a lawsuit from Trump. (Note, tellingly, Durham’s motion to compel doesn’t mention a great deal of accurate Russian-language research by Fusion — to which Nellie Ohr was just one of a number of contributors — that was never publicly shared nor debunked as to quality.)

There are four redacted passages that describe the advice he provided; he is providing these descriptions ex parte for Judge Cooper to use to assess the Democrats’ privilege claims. Two short ones probably pertain to the scope of Perkins Coie’s relationship with the Democratic committees. Another short one likely describes Elias’ relationship, and through him, Fusion’s, with the oppo research staff on the campaign. But the longest redaction describing Elias’ legal advice, one that extends more than five paragraphs and over a page and a half, starts this way:

That is, the introduction to Elias’ description of the privilege claims tied to the Sussmann trial starts from Trump’s request of Russia to hack Hillary. Part of that sentence and the balance of the paragraph is redacted — it might describe that immediately after Trump made that request, the Russians fulfilled his request — but the redacted paragraph and the balance of the declaration presumably describes what legal advice he gave Hillary as she faced a new onslaught of Russian hacking attempts that seemingly responded to her opponent’s request for such hacking.

Given what Elias described about his decision to hire Fusion, part of that discussion surely explains his effort to assess an anomaly identified independently by researchers that reflected unexplained traffic between a Trump marketing server and a Russian bank. Elias probably described why it was important for the Hillary campaign to assess whether this forensic data explained why Russian hackers immediately responded to Trump’s request to hack her.

As I have noted, in past filings Durham didn’t even consider the possibility that Elias might discuss the renewed wave of hacking that Hillary’s security personnel IDed in real time with Sussmann, Perkins Coie’s cybersecurity expert.

It’s a testament to how deep John Durham is in his conspiracy-driven rabbit hole that he assumes a 24-minute meeting between Marc Elias and Michael Sussmann on July 31, 2016 to discuss the “server issue” pertained to the Alfa Bank allegations. Just days earlier, after all, Donald Trump had asked Russia to hack Hillary Clinton, and within hours, Russian hackers obliged by targeting, for the first time, Hillary’s home office. Someone who worked in security for Hillary’s campaign told me that from his perspective, the Russian attacks on Hillary seemed like a series of increasing waves of attacks, and the response to Trump’s comments was one of those waves (this former staffer documented such waves of attack in real time). The Hillary campaign didn’t need Robert Mueller to tell them that Russia seemed to respond to Trump’s request by ratcheting up their attacks, and Russia’s response to Trump would have been an urgent issue for the lawyer in charge of their cybersecurity response.

It’s certainly possible this reference to the “server” issue pertained to the Alfa Bank allegations. But Durham probably doesn’t know; nor do I. None of the other billing references Durham suggests pertain to the Alfa Bank issue reference a server.

Durham took a reference that might pertain to a discussion of a correlation between Trump’s ask and a renewed wave of Russian attacks on Hillary (or might pertain to the Alfa Bank anomaly), and assumed instead it was proof that Hillary was manufacturing unsubstantiated dirt on her opponent. He never even considered the legal challenges someone victimized by a nation-state attack, goaded by her opponent, might face.

And yet, given the structure of that redaction from Elias, that event is the cornerstone of the privilege claims surrounding the Alfa Bank allegations.

Because of all the things I laid out in this post, Judge Cooper may never have to evaluate these privilege claims at all. To introduce privileged evidence, Durham has to first withstand:

  • Denial because his 404(b) notice asking to present it was late, and therefore forfeited
  • Denial because Durham’s motion to compel violated local rules and grand jury process, in some ways egregiously
  • Rejection because most of the communications over which the Democrats have invoked privilege are inadmissible hearsay
  • The inclusion or exclusion of the testimony of Rodney Joffe, whose privilege claims are the most suspect of the lot, but whose testimony would make the communications Durham deems to be most important admissible

Cooper could defer any assessment of these privilege claims until he decides these other issues and, for one or several procedural reasons, simply punt the decision entirely based on Durham’s serial failures to follow the rules.

Only after that, then, would Cooper assess a Durham conspiracy theory for which Durham himself admits he doesn’t have proof beyond a reasonable doubt. As part of his bid to submit redacted and/or hearsay documents as exhibits under a claim that this all amounted to a conspiracy (albeit one he doesn’t claim was illegal), Durham argues that unless he can submit hearsay and privileged documents, he wouldn’t otherwise have enough evidence to prove his conspiracy theory.

Nor is evidence of this joint venture gratuitous or cumulative of other evidence. Indeed, the Government possesses only a handful of redacted emails between the defendant and Tech Executive-1 on these issues. And the defendant’s billing records pertaining to the Clinton Campaign, while incriminating, do not always specify the precise nature of the defendant’s work.

Accordingly, presenting communications between the defendant’s alleged clients and third parties regarding the aforementioned political research would hardly amount to a “mini-trial.” (Def. Mot. at 20). Rather, these communications are among the most probative and revealing evidence that the Government will present to the jury. Other than the contents of privileged communications themselves (which are of course not accessible to the Government or the jury), such communications will offer some of the most direct evidence on the ultimate question of whether the defendant lied in stating that he was not acting for any other clients.

In short, because the Government here must prove the existence of client relationships that are themselves privileged, it is the surrounding events and communications involving these clients that offer the best proof of those relationships.

Moreover, even if the Court were to find that no joint venture existed, all of the proffered communications are still admissible because, as set forth in the Government’s motions, they are not being offered to prove the truth of specific assertions. Rather, they are being offered to prove the existence of activities and relationships that led to, and culminated in, the defendant’s meeting with the FBI. Even more critically, the very existence of these written records – which laid bare the political nature of the exercise and the numerous doubts that the researchers had about the soundness of their conclusions – gave the defendant and his clients a compelling motive, separate and apart from the truth or falsity of the emails themselves, to conceal the identities of such clients and origins of the joint venture. Accordingly, they are not being offered for their truth and are not hearsay.

This passage (which leads up to a citation from one of the Georgia Tech researchers to which Sussmann was not privy that the frothers have spent the weekend drooling over) is both a confession and a cry for help.

In it, Durham admits he doesn’t actually have proof that the conspiracy he is alleging is the motive behind Michael Sussmann’s alleged lie.

He’s making this admission, of course, while hiding the abundant evidence — evidence he didn’t bother obtaining before charging Sussmann — that Sussmann and Joffe acceded to the FBI request to help kill the NYT story, which substantiates Sussmann’s stated motive.

And then, in the same passage, Durham is pointing to that absence of evidence to justify using that same claimed conspiracy for which he doesn’t have evidence to pierce privilege claims to obtain the evidence he doesn’t have. It’s a circular argument and an admission that all the claims he has been making since September are based off his beliefs about what must be there, not what he has evidence for.

Thus far the researchers’ beliefs about what kind of back channels they might find between Trump and Russia have far more proof than Durham’s absence of evidence.

Again, Durham doesn’t even claim that such a conspiracy would be illegal (much less chargeable under the statute of limitations), which is why he didn’t do what he could have had he been able to show probable cause that a crime had been committed: obtaining the communications with a warrant and using a filter team. Bill Barr’s memoir made it quite clear that he appointed Durham not because a crime had been committed, but because he wanted to know how a “bogus scandal” in which DOJ found multiple national security crimes started. ”Even after dealing with the Mueller report, I still had to launch US Attorney John Durham’s investigation into the genesis of this bogus scandal.” In his filing, Durham confesses to doing the same, three years later: using his feelings about a “bogus scandal” to claim a non-criminal conspiracy that he hopes might provide some motive other than the one — national security — that DOJ has already confirmed.

An absolutely central part of Durham’s strategy to win this trial is to present his conspiracy theories, whether by belatedly piercing privilege claims he should have addressed before charging Sussmann (even assuming he’ll find what he admits he doesn’t have proof is there), or by presenting his absence of evidence and claiming it is evidence. He will only be permitted to do if Judge Cooper ignores all his rule violations and grants him a hearsay exception.

But if he manages to present his conspiracy theories, Sussmann can immediately pivot and point out all the evidence in DOJ’s possession that proves not just that the suspicions Durham insists must be malicious and political in fact proved to be true, but also that DOJ — his former boss! — already deemed these suspicions national security concerns that in some cases amounted to crimes.

John Durham’s entire trial strategy consists of claiming that it was obviously political to investigate a real forensic anomaly to see whether it explained why Russia responded to Trump’s call for more hacks by renewing their attack on Hillary. He’s doing so while withholding abundant material evidence that DOJ already decided he’s wrong.

So even if he succeeds, even if Cooper grants him permission to float his conspiracy theories and even if they were to succeed at trial, Sussmann would have immediate recourse to ask for sanctions, pointing to all the evidence in DOJ’s possession that Durham’s claims of malice were wrong.

Update: The bad news I’m still working through my typos, with your help, including getting the name of Dmitri Simes’ organization wrong. The good news is the typos are probably due to being rushed out to cycle in the sun, so I have a good excuse.

Update: Judge Cooper has issued an initial ruling on Durham’s expert witness. It limits what Durham presents to the FBI investigation (excluding much of the CIA investigation he has recently been floating), and does not permit the expert to address whether the data actually did represent communications between Trump and Alfa Bank unless Sussmann either affirmatively claims it did or unless Durham introduced proof that Sussmann knew the data was dodgy.

Finally, the Court takes a moment to explain what could open the door to further evidence about the accuracy of the data Mr. Sussmann provided to the FBI. As the defense concedes, such evidence might be relevant if the government could separately establish “what Mr. Sussmann knew” about the data’s accuracy. Data Mot. at 3. If Sussmann knew the data was suspect, evidence about faults in the data could possibly speak to “his state of mind” at the time of his meeting with Mr. Baker, id., including his motive to conceal the origins of the data. By contrast, Sussmann would not open the door to further evidence about the accuracy of the data simply by seeking to establish that he reasonably believed the data were accurate and relied on his associates’ representations that they were. Such a defense theory could allow the government to introduce evidence tending to show that his belief was not reasonable—for instance, facially obvious shortcomings in the data, or information received by Sussmann indicating relevant deficiencies.

Ultimately, Cooper is treating this (as appropriate given the precedents in DC) as a question of Sussmann’s state of mind.

Importantly, this is what Cooper says about Durham blowing his deadline (which in this case was a deadline of comity, not trial schedule): he’s going to let it slide, in part because Sussmann does not object to the narrowed scope of what the expert will present.

Mr. Sussmann also urges the Court to exclude the expert testimony on the ground that the government’s notice was untimely and insufficiently specific. See Expert Mot. at 6–10; Fed. R. Crim. P. 16(a)(1)(G). Because the Court will limit Special Agent Martin’s testimony largely to general explanations of the type of technical data that has always been part of the core of this case—much of which Mr. Sussmann does not object to—any allegedly insufficient or belated notice did not prejudice him. See United States v. Mohammed, No. 06-cr-357, 2008 WL 5552330, at *3 (D.D.C. May 6, 2008) (finding that disclosure nine days before trial did not prejudice defendant in part because its subject was “hardly a surprise”) (citing United States v. Martinez, 476 F.3d 961, 967 (D.C. Cir. 2007)).

This suggests Cooper may be less willing to let other deadlines slide, such as the all-important 404(b) one.

Steve Bannon’s “Alleged” Non-Contemptuous Behavior

On Friday, the two sides in the Steve Bannon contempt prosecution filed a bunch of motions about the scope of the case. They are:

Office of Legal Counsel memos

The fight over OLC memos is likely to get the bulk of attention, possibly even from Judge Carl Nichols (who relied on one of the OLC memos at issue in the Harriet Miers case). While there’s no telling what a Clarence Thomas clerk might do, I view this fight as mostly tactical. One way for Bannon’s attempt to fail (Nichols improbably ruling that OLC memos cannot be relied on in court) would upend the entire way DOJ treats OLC memos. That might have salutary benefits in the long term, but in the short term it would expose anyone, like Vice President Dick Cheney, who had relied on OLC memos in the past to protect themselves from torture and illegal wiretapping exposure themselves.

In my opinion this challenge is, in part, a threat to Liz Cheney.

But as DOJ (I think correctly) argues, none of this should matter. That’s because — as they show with two exhibits — none of the OLC memos apply to Bannon, and not just because he was not a government employee when he was plotting a coup.

On October 6, 2021, Trump attorney Justin Clark wrote to Bannon attorney Robert Costello (citing no prior contact with Costello), instructing him not to comply to the extent permitted by law:

Therefore, to the fullest extent permitted by law, President Trump instructs Mr. Bannon to: (a) where appropriate, invoke any immunities and privileges he may have from compelled testimony in response to the Subpoena; (b) not produce any documents concerning privileged material in response to the Subpoena; and (c) not provide any testimony concerning privileged material in response to the Subpoena.

But on October 14, Clark wrote and corrected Costello about claims he had made in a letter to Benny Thompson.

Bob–I just read your letter dated October 13, 2021 to Congressman Benny Thompson. In that letter you stated that “[a]s recently as today, counsel for President Trump, Justin Clark Esq., informed us that President Trump is exercising his executive privilege; therefore he has directed Mr. Bannon not to produce documents or testify until the issue of executive privilege is resolved.”

To be clear, in our conversation yesterday I simply reiterated the instruction from my letter to you dated October 6, 2021, and attached below.

Then again on October 16, Clark wrote Costello stating clearly that Bannon did not have immunity from testimony.

Bob–In light of press reports regarding your client I wanted to reach out. Just to reiterate, our letter referenced below didn’t indicate that we believe there is immunity from testimony for your client. As I indicated to you the other day, we don’t believe there is. Now, you may have made a different determination. That is entirely your call. But as I also indicated the other day other avenues to invoke the privilege — if you believe it to be appropriate — exist and are your responsibility.

In other words, before Bannon completely blew off the Committee, Trump’s lawyer had told him not to do it on Trump’s account. (See this post which captures how Robert Costello had tried to bullshit his way through this.) That, by itself, should kill any claim that he was relying on an OLC memo.

Bannon’s prior (alleged) non-contemptuous past behavior

For different reasons, I’m a bit more interested in DOJ’s attempt to prevent Bannon from talking about what a good, subpoena-obeying citizen he has been in the past. Costello had made this argument to DOJ in an interview Bannon is trying to get excluded.

DOJ argues, uncontroversially, that because Bannon’s character is not an element of the offense, such evidence of prior compliance with a subpoena would be irrelevant.

Just as the fact that a person did not rob a bank on one day is irrelevant to determining whether he robbed a bank on another, whether the Defendant complied with other subpoenas or requests for testimony—even those involving communications with the former President—is irrelevant to determining whether he unlawfully refused to comply with the Committee’s subpoena here.

I expect Judge Nichols will agree.

What I’m interested in, though, is the way the filing refers to Bannon’s past compliance with subpoenas as “alleged.” It does so nine times:

The Defendant has suggested that, because he (allegedly) was not contemptuous in the past, he is not a contemptuous person and was not, therefore, contemptuous here.

[snip]

Mr. Costello advised that the Defendant had testified once before the Special Counsel’s Office of Robert S. Mueller, III (the “SCO”), although Mr. Costello did not specify whether the pertinent appearance was before the grand jury or in some other context; once before the U.S. Senate Select Committee on Intelligence; and twice before the U.S. House of Representatives Permanent Select Committee on Intelligence. See id. Although, in his letter to the Committee and his interview, Mr. Costello said nothing about whether the Defendant was subpoenaed for documents by those authorities and whether the Defendant did produce any, and he did not say whether those other subpoenas or requests were limited to communications with the former President or involved other topics as well, the Defendant and Mr. Costello have asserted, essentially, that the Defendant’s alleged prior compliance demonstrates that he understands the process of navigating executive privilege, illustrates his willingness to comply with subpoenas involving communications with the former President, and rebuts evidence that his total noncompliance with the Committee’s subpoena was willful.

[snip]

The Defendant cannot defend the charges in this case by offering evidence of his experience with and alleged prior compliance with requests or subpoenas for information issued by Congress and the SCO.

[snip]

The Defendant’s alleged prior compliance with subpoenas or requests for information is of no consequence in determining whether he was contemptuous here.

[snip]

Specifically, the Defendant’s alleged compliance with other demands for testimony is not probative of his state of mind in failing to respond to the Committee’s subpoena, and his alleged non-contemptuous character is not an element of the contempt offenses charged in this case.

[snip]

1 1 To the extent the Defendant seeks to introduce evidence of his general character for law-abidingness, see In re Sealed Case, 352 F.3d 409, 412 (D.C. Cir. 2003), he cannot use evidence of his alleged prior subpoena compliance to do so. Evidence of “pertinent traits,” such as law-abidingness, only can be introduced through reputation or opinion testimony, not by evidence of specific acts. See Fed. R. Evid. 404(a)(2)(A); Fed. R. Evid. 405(a); Washington, 106 F.3d at 999.

[snip]

Second, whatever probative value the Defendant’s alleged prior compliance in other circumstances might serve, that value is substantially outweighed by the trial-within-a-trial it will prompt and the confusion it will inevitably cause the jury.

[snip]

The Defendant’s reliance on counsel and/or his alleged good faith in response to prior subpoenas is thus not pertinent to any available defense and is irrelevant to determining whether his failure to produce documents and appear for testimony in response to the Committee’s subpoena was willful. [my emphasis]

The reason DOJ always referred to Bannon’s past compliance with subpoenas as “alleged” is because calling the claim “bullshit” — which is what it is — would be unseemly in a DOJ filing.

As a reminder, here’s the history of Bannon’s “alleged” past compliance with subpoenas (it is unknown whether he was subpoenaed in the Build the Wall fraud investigation):

HPSCI: Bannon got subpoenaed after running his mouth off in the wake of the release of Fire and Fury (Republicans likely acceded to that so they could discipline Bannon for his brief and soon-aborted effort to distance himself from Trump). In his first appearance, Bannon refused to answer a bunch of questions. Then, in a second appearance and after the intervention of Devin Nunes, Bannon reeled off a bunch of “no” answers that had been scripted by Nunes and the White House, some of which amounted to misdirection and some of which probably were lies. Bannon also claimed that all relevant communications would have been turned over by the campaign, even though evidence submitted in the Roger Stone case showed that Bannon was hiding responsive — and very damning — communications on his personal email and devices.

SSCI: Bannon was referred in June 2019 by the Republican-led committee to DOJ for making false statements to the Committee.

According to the letter, the committee believed Bannon may have lied about his interactions with Erik Prince, a private security contractor; Rick Gerson, a hedge fund manager; and Kirill Dmitriev, the head of a Russian sovereign fund.

All were involved in closely scrutinized meetings in the Seychelles before Trump’s inauguration.

[snip]

No charges were filed in connection with the meetings. But investigators suspected that the men may have been seeking to arrange a clandestine back-channel between the incoming Trump administration and Moscow. It’s unclear from the committee’s letter what Bannon and Prince might have lied about, but he and Prince have told conflicting stories about the Seychelles meeting.

Prince said he returned to the United States and updated Bannon about his conversations; Bannon said that never happened, according to the special counsel’s office.

Mueller: Over the course of a year — starting in two long interviews in February 2018 where Bannon lied with abandon (including about whether any of his personal comms would contain relevant information), followed by an October 2018 interview where Bannon’s testimony came to more closely match the personal communications he had tried to hide, followed by a January 2019 interview prior to a grand jury appearance — Bannon slowly told Mueller a story that more closely approximated the truth — so much so that Roger Stone has been squealing about things Bannon told the grand jury (possibly including about a December 2016 meeting at which Stone appears to have tried to blackmail Trump) ever since. Here’s a post linking Bannon’s known interview records and some backup.

But then the DC US Attorney’s Office (in efforts likely overseen by people JP Cooney, who is an attorney of record on this case) subpoenaed Bannon in advance of the Stone trial, and in a preparatory interview, Bannon reneged on some of his testimony that had implicated Stone. At Stone’s trial, prosecutors used his grand jury transcript to force Bannon to adhere to his most truthful testimony, though he did so begrudgingly.

In other words, the record shows that Bannon has always been contemptuous, unless and until you gather so much evidence against him as to force him to blurt out some truths.

Which is why I find it curious that DOJ moved to exclude Bannon’s past contemptuousness, rather than moving to admit it as 404(b) evidence showing that, as a general rule, Bannon always acts contemptuously. His character, DOJ could have claimed, is one of deceit and contempt. The reason may be the same (that contempt is a one-time act in which only current state of mind matters).

But I’m also mindful of how the Mueller Report explained not prosecuting three people, one of whom is undoubtedly Bannon.

We also considered three other individuals interviewed — [redacted] — but do not address them here because they are involved in aspects of ongoing investigations or active prosecutions to which their statements to this Office may be relevant.

That is, one reason Bannon wasn’t prosecuted for lying to Mueller was because of his import in, at least, the ongoing Roger Stone prosecution. That explains why DOJ didn’t charge him in 2019, to retain the viability of his testimony against Stone. I’m interested in why they continue the same approach. It seems DOJ’s decision to treat Bannon’s past lies — even to SSCI! — as “alleged” rather than “criminally-referred” by SSCI, may also reflect ongoing equities in whatever Bannon told the the grand jury two years ago. One thing Bannon lied about at first, for example, was the back channel to Dubai that may get him named as a co-conspirator in the Tom Barrack prosecution.

But there were other truths that Bannon ultimately told that may make it worthwhile to avoid confirming that those truths only came after a whole bunch of lies.

Update: Thanks to Jason Kint for reminding me that Bannon refused to be served an FTC subpoena pertaining to Cambridge Analytica in 2019.

Sedition Is the Foundation on Which the Trump Associate Investigation Builds

As I laid out in this post, I’m impatient with those who claim the government has taken a new direction in the January 6 investigation with subpoenas to people like — most audibly — Ali Alexander. Alexander got a number of journalists who know better to repeat his claim that he was “cooperating” with the investigation rather than merely “complying” with a subpoena. Few of those journalists pointed out real holes in his cover story — including his silence about Roger Stone and Alex Jones, his disavowal of communications with militias before he arrived at the Capitol, his use of cover organizations to get his permits, and his seeming message to co-conspirators that if he once had evidence, it is no longer in his possession.

In his statement, Alexander sought to separate himself from the substance of the investigation, saying he did not coordinate with the Proud Boys and suggesting his contact with the Oath Keepers was limited to accepting an offer for them to act as ushers at an event that never took place: his own permitted event near the Capitol, which didn’t occur because of the mob attack on the Capitol. The Oath Keepers are the subject of conspiracy charges for their roles in breaching the Capitol that day.

“I did not finance the Ellipse equipment. I did not ever talk with the White House about security groups. Any militia working security at the Ellipse belonged to “Women for America First,” not us,” Alexander said. “I did not coordinate any movements with the Proud Boys or even see them that day. I did take Oath Keepers offer to act as ushers for the Area 8 event but all of that was lost in the chaos. I wasn’t in communication with any of the aforementioned groups while I was near the Capitol working to get people away from the building. Lastly, I’m not willing to presume anyone’s guilt.”

“I did nothing wrong and I am not in possession of evidence that anyone else had plans to commit unlawful acts,” Alexander said. “I denounce anyone who planned to subvert my permitted event and the other permitted events of that day on Capitol grounds to stage any counterproductive activities.”

This is classic Roger Stone-schooled disinformation and should be treated as such.

Reporters have, undoubtedly based on really good sourcing, emphasized the existence of a new grand jury focusing on Trump’s associates, and from that, argued it’s a new direction — though as I’ve documented, DOJ has availed themselves of at least six grand juries thus far in this investigation.

But how could an investigation of Alexander’s actions be new if DOJ successfully debunked much of his current cover story — that he was “working to get people away from the building” — last November? Alexander co-traveler Owen Shroyer attempted to offer the same false claim in an attempt to throw out charges — filed in August — against him, but Judge Tim Kelly rejected that attempt on January 20. How could this be a totally new direction if prosecutors would have obtained Alexander’s Stop the Steal listserv as a result of Brandon Straka’s “cooperation” in early 2021? How could it be a new direction if DOJ has gotten guilty pleas from those who went first to the Capitol, then to the East front, and finally breached the building in response to lies about Alexander’s rally permits told by Alex Jones? DOJ has, demonstrably, been laying the groundwork for a subpoena to Alexander for over year.

And it’s not just Alexander. Steps DOJ took over the past year were undoubtedly necessary preconditions to going after Trump’s close associates. Those include:

These are efforts that started in January 2021. Some of the most important — the way DOJ seized Rudy’s comms and got a privilege review without revealing a January 6 warrant — started on Lisa Monaco’s first day in office.

But there’s a more important thing that DOJ probably believed they needed before going after Trump and his close associates: compelling proof that Trump wielded the mob in his effort to obstruct the vote count, obtaining the proof in the yellow boxes, below. That was one of the things I was trying to lay out in this post.

While there are specific things Trump and his associates did that were illegal — the call to Brad Raffensperger, the fake elector certificates, the illegal demand of Mike Pence — many of the rest are only illegal (at least under the framework DOJ is using) if they are tied to Trump’s successful effort to target the mob at American democracy. You first have to prove that Trump fired the murder weapon, and once you’ve established that proof, you can investigate who helped Trump buy the weapon, who helped him aim it, who loaded the gun for him, who was standing behind him with four more weapons to fire if his own shot failed to work.

And this is why I’m interested in the apparent two month process it appears to have taken DOJ to shift its main focus from the work of the January 8, 2021 grand jury, whose work culminated in the January 12, 2022 seditious conspiracy indictment against Stewart Rhodes, and the February 14, 2022 grand jury, the foundational overt act of which was the March 7 conspiracy charge against Enrique Tarrio.

The first grand jury proved that the vast majority of the rioters, whether trespassers or assault defendants, got there via one of three methods:

  • Responding to Trump and Alex Jones’ lies about Trump accompanying the marchers and giving a second speech
  • Acting directly on Trump’s “orders,” especially his December 19 tweet, often bypassing the Ellipse rally altogether
  • Coordinating with one of the militias, especially the Proud Boys

Judge Amit Mehta also seems to believe that the grand jury developed proof that many of those who assaulted cops were aided and abetted by Donald Trump. The first grand jury also proved that of those who — having been led to believe false claims about vote fraud based on over three months of propaganda — had the intent of obstructing the vote count, a great number had the specific goal of pressuring or punishing Mike Pence. While the intent of pressuring Pence came, for some rioters, from militia hierarchies, for most others, it came directly from Trump.

This is my hypothesis about the seeming shift from using the January 8 grand jury as the primary investigative grand jury to launching a new one on February 14. The January 8 grand jury has largely completed its investigation into what caused the riot, how it was orchestrated, who participated; the remaining prosecutions that don’t require and affect the larger picture will be and have been charged via the November 10 grand jury. But by indicting Tarrio and showing, with Charles Donohoe’s cooperation, that everything the Proud Boys did emanated from Tarrio’s orders and, by association, from whatever understanding Tarrio had about the purpose of the riot from his communications with people close to Trump, DOJ and the Valentine’s Day grand jury will move onto the next level of the conspiracy to obstruct the vote count. Again, that’s just a hypothesis — we’ll see whether that’s an accurate read in the weeks ahead. But it’s not a new direction at all. It is the direction that the investigation has demonstrably been headed for over a year.

Update: In a statement pretending the stories about his cooperation were leaked by DOJ, Alexander insists he is not cooperating, but complying.

After consultation with counsel, we provided a statement that established that I was not a target of this grand jury; I haven’t been accused of any criminal wrongdoing; and that I was complying, as required by law, with their probe.

[snip]

Useful idiots on the right, clinging to a New York Times headline that sensationalizes my compliance with a subpoena, will empower the Deep State which planted these stories to give their political investigation more legs to hurt our election integrity movement and Trump’s 2024 prospects. [my emphasis]

The rest of the statement should convince anyone that this is a replay of the same bullshit we saw from Stone and Jerome Corsi in the Mueller investigation.

Six Investigative Files from the Mueller Investigation Durham May Have Just Committed to Providing Michael Sussmann

As I noted in this thread, while John Durham and Michael Sussmann have battling motions in limine about whether Durham can introduce evidence of his own conspiracy theory about the Democrats packaging dirt against Donald Trump, Durham somehow forgot to file a motion in limine to prevent Sussmann from raising facts that show how reasonable it was to search for ties between Trump and Russia in 2016.

It’d be hard to see how he could do that anyway. After all, there’s abundant evidence that the reason researchers and Democratic operatives alike focused their effort to understand the DNS anomaly in late July and thereafter is because of the things Trump said on July 27, 2016.

TRUMP: Why do I have to (ph) get involved with Putin? I have nothing to do with Putin. I’ve never spoken to him. I don’t know anything about him other than he will respect me. He doesn’t respect our president. And if it is Russia — which it’s probably not, nobody knows who it is — but if it is Russia, it’s really bad for a different reason, because it shows how little respect they have for our country, when they would hack into a major party and get everything. But it would be interesting to see — I will tell you this — Russia, if you’re listening, I hope you’re able to find the 30,000 e-mails that are missing. I think you will probably be rewarded mightily by our press. Let’s see if that happens. That’ll be next. Yes, sir…

[snip]

TRUMP: Excuse me, listen. We wanted to; we were doing Miss Universe 4 or 5 years ago in Russia. It was a tremendous success. Very, very successful. And there were developers in Russia that wanted to put a lot of money into developments in Russia. And they wanted us to do it. But it never worked out.

Frankly I didn’t want to do it for a couple of different reasons. But we had a major developer, particular, but numerous developers that wanted to develop property in Moscow and other places. But we decided not to do it.

[snip]

QUESTION: I would like to know if you became president, would you recognize (inaudible) Crimea as Russian territory? And also if the U.S. would lift sanctions that are (inaudible)?

TRUMP: We’ll be looking at that. Yeah, we’ll be looking. [my emphasis]

Particularly if Sussmann knew in real time — as the Hillary campaign did — that a renewed wave of attacks by Russia started immediately after Trump’s comments, Sussmann can fairly explain that, in their attempt to understand the correlation suggesting causation between Trump’s request and the attack, the anomalous DNS data seeming to suggest communication between Trump and Alfa Bank might explain the connection. In fact, the inference that Russia’s back channel was Alfa Bank had some backing (LetterOne Board Member Richard Burt had been involved in reviewing Trump’s first foreign policy speech), though the actual back channels were Paul Manafort and Roger Stone. So it was reasonable to try to understand the possibility of that back channel and reasonable to share with the FBI data reflecting that possibility.

For his part, given the way that Durham has always obscured when in late July the effort to research Trump got started, he’s likely to rely on a document — which may be dated July 26 or may be dated July 28, but which the Intelligence Community judged might be a fabrication in real time — claiming that Hillary had already decided to tie Trump and Russia together.

Given the timing of the increased effort to understand the Alfa Bank anomaly and the explicit references to Trump’s July 27 comments, Sussmann must be permitted to show how Trump’s July 27 comments were part of his state of mind when he went to the FBI and made his actions (and, indeed, the privilege claims Durham is now trying to pierce) reasonable.

Had Durham left well enough alone, that might be all Sussmann could ask to present at trial. But if Durham tries to rely on that sketchy intelligence report or if he wins his bid to present his full conspiracy theory, then it opens him up to far great discovery obligations. They include the investigative files on the following people Mueller investigated:

Richard Burt: The Mueller Report describes that, after Vladimir Putin ordered Petr Aven to seek to establish a back channel with Trump after the election, Aven approached Richard Burt, with whom he served on the board of LetterOne, to attempt to reach out. But Burt had played a role in outreach to the Trump campaign long before that, in an April 2016 Center for National Interest review of Trump’s first foreign policy speech. Burt was also present at two CNI-hosted speeches, one in June and August, at which “the participants addressed U.S. relations with Russia, including how U.S. relations with NATO and European countries affected U.S. policy toward Russia.” Indeed, according to Burt’s interview report, he was the one focusing on NATO and Europe. Burt’s publicly released interview report remains heavily redacted, including numerous redactions of material that was, in March 2020, still under investigation. Given that Durham wants to litigate whether it was realistic to think Trump might have a back channel through Richard Burt, Durham probably needs to provide the Burt-related materials to Sussmann.

Roger Stone: It is a fact that, on July 31, 2016 — during a period, starting at least by July 25, when he was actively seeking to optimize the files Russia stole from Hillary — Roger Stone had two conversations with Donald Trump and afterwards sent draft tweets promising a new peace deal with Putin for Trump to use in the coming days.

(U) On Sunday July 31, at 9:15 p.m., the day after speaking at length with Manafort, Stone called Gates.1550 Ten minutes later, Stone had two phone calls with Trump that lasted over ten minutes. 1551 Stone then emailed Jessica Macchia, one of Trump’s assistants, eight draft tweets for Trump, under the subject line “Tweets Mr. Trump requested last night.”1552 Many of the draft tweets attacked Clinton for her adversarial posture toward Russia and mentioned a new peace deal with Putin, such as “I want a new detente with Russia under Putin.”1553 (U) At 10:45 p.m. that same evening, Stone emailed Corsi again with the subject line “Call me MON[day]” and writing that “Malloch should see Assange.”1554 (U) The next morning, August 1, Stone again spoke twice with Trump. 1555 Stone later informed Gates of these calls. 1556 According to an email that morning from Stone to Macchia, Trump had “asked [Stone] for some other things” that Stone said he was “writing now.”1557

1551 (U) Records reviewed by the Committee showed a six minute call from Stone to Trump on July 31 at approximately 9:25 p.m. and a five-minute call from Stone to himself at approximately 9:36 p.m. See AT&T Toll records, Roger Stone/Drake Ventures (ATTSSCI00039). Evidence introduced at trial against Stone showed corresponding calls with Trump at those same times and for the same length of time, including a call from Trump at the number “-1” to Stone at 9:36 p.m. See United States v. Stone, Gov. Ex. 148; United States v. Stone, Gov. Ex. 164; Testimony of Michelle Taylor, United States v. Stone, pp. 348-349. This suggests that that Trump’s phone would sometimes appear in another person’s phone records as that person calling him or herself, or as a call with phone number “-1.” A number of such calls appear in Stone’s records and others, including records provided by Donald Trump Jr., during relevant time periods, but the Committee did not investigate those additional calls further.

1552 (U) Email, Stone to Macchia, July 31, 2016 (TRUMPORG_18_001307).

1553 (U) Ibid One draft tweet referenced the Clinton Foundation. Stone followed up about the tweets with Rhona Graff the following morning, August 1, to make sure Trump received them. Email, Stone to Graff, August 1, 2016 (TRUMPORG _ 18_001310).

1555 (U) AT&T toll records, Roger Stone/Drake Ventures.

1556 (U) Text message, Stone to Gates, August 2, 2016 (United States v. Stone, Gov. Ex. 20) (“Spoke to Trump a cpl of times.”).

1557 (U) Email, Stone to Macchia, August 1, 2016 (TRUMPORG_l8_001315).

It is also a fact that while most of Trump’s aides said that Trump ad-libbed that “Are you listening” comment, Rick Gates testified that Stone was stating — before flip-flopping on the issue days later — that Russia may have the emails, implying that Stone could have been the source of that comment along with the scripted tweets. Indeed, from that April 2016 foreign policy speech, Stone was demanding that Gates allow him to have input on Trump’s foreign policy statements.

It is also a fact that by August 2018, the FBI had evidence that led them to suspect that Stone had learned of the Guccifer 2.0 persona before it went live on June 15, 2016. Given how centrally Durham has made the July 2016 start date of the research into the Alfa Bank anomalies, he may be on the hook for providing details showing that Stone already had a back channel by then. That’s all the more true if Durham wants to rely on that intelligence product focusing on Guccifer 2.0.

Paul Manafort, Konstantin Kilimnik, and Alex Van der Zwaan: With his motion in limine, Durham has formally noticed that he wants to litigate at trial whether it was fair for people acting on behalf of Hillary — to say nothing of researchers collaborating with DARPA and the FBI or a private citizen with an established record conducting infosec inquiries into threats to the United States — to want to inquire into the following topics:

  • Illegal financial relationships between Oligarchs close to Putin and those close to Trump
  • Laundering of Russian-backed money through Cyprus
  • The actions of those married to the children of Alfa Bank’s founders
  • Sanctions violations and FEC regulations implicated by Fancy Bear’s ongoing attack on the election

Durham suggests the only reason someone would want to research such topics was unfounded animus directed at Trump. But the results of the Mueller inquiry — to say nothing of what the ongoing investigation confirming Konstanin Kilimnik did, in fact, share Trump’s campaign strategy with Russian intelligence agencies — prove that all these concerns not only had merit, but proved to be absolutely correct.

At least one person close to Donald Trump, Manafort, did have illegal financial relationships with Oligarchs close to Putin: the Campaign Manager who got fired for such ties in the middle of this intensifying focus on the Alfa Bank anomalies. That person did launder the money he made from them through Cyprus. How that Campaign Manager — who was working for “free” — got paid remains a mystery, implicating FEC regulations. And some of the other actions implicating the Russian operation that FEC’s General Counsel found reason to believe amounted to a campaign finance violations include:

  • Trump’s request, “Russia are you listening?”
  • Illegal donations from Cambridge Analytica
  • An in-kind donation for hacking Hillary
  • Internet Research Agency donation of trolling to support Trump

While Democrats didn’t block the much smaller violation tied to the dossier, Republicans have blocked Trump from any accountability for his likely campaign finance violations involved with accepting help from Russia.

Meanwhile, in the very same weeks when those Durham claims were involved in a malicious conspiracy targeting the children-in-laws of Alfa Bank’s founders, German Khan’s son-in-law, Alex Van der Zwaan, was taking action on Rick Gates’ orders to cover up Manafort’s ties to those Oligarchs. Van der Zwaan would, at first, lie to Mueller about the actions he took in response to Gates’ orders starting on September 7, 2016, including a call to Kilimnik, whom Van der Zwaan understood to be a former Russian spy.

In or about September 2016, VAN DER ZW AAN spoke with both Gates and Person A regarding the Report. In early September 2016, Gates called VAN DER ZWAAN and told him to contact Person A. After the call, Gates sent VAN DER ZWAAN documents including a preliminary criminal complaint in Ukraine via an electronic application called Viber. VAN DER ZWAAN then called Person A and discussed in Russian that formal criminal charges might be brought against a former Ukrainian Minister of Justice, Law Finn A, and Manafort. VAN DER ZWAAN recorded the call. VAN DER ZWAAN then called the senior partner on the Report at Law Firm A and partially recorded that call. Finally, VAN DER ZWAAN called Gates and recorded the call. VAN DER ZWAAN also took notes of the calls.

If Durham wants to argue that it was unreasonable to inquire into whether German Khan’s son-in-law might be involved in illicit doings with Oligarchs tied to Putin and people close to Trump, he needs to provide Sussmann the details of the cover-up that Van der Zwaan conducted with Kilimnik and Rick Gates just days before Sussmann’s meeting with James Baker. He needs to allow Sussmann to show that evidence in DOJ’s possession shows that not only was it a valid subject of inquiry, but precisely the thing April Lorenzen was concerned might be going on was going on, in real time.

Michael Cohen: With his untimely 404(b) notice, Durham informed Sussmann that he also wants to claim the dossier was part of the conspiracy he was trying to cover up by lying, even though he has provided no evidence that Sussmann knew Christopher Steele was sharing those reports with the FBI. By making it an issue, though, Durham also makes Michael Cohen’s real secret communications with the Kremlin, which disinformation in the dossier seemed tailored to obscure, an issue. That’s all the more true given that Trump’s “Russia are you listening” comments also included statements that — Cohen has described recognizing in real time — were a lie that covered up that Trump was still chasing an impossibly lucrative real estate deal that involved a former GRU officer and one of two sanctioned banks when he claimed to have decided not to pursue one. This topic is all the more pertinent given that Trump Organization withheld the documents reflecting these secret back channel communications from Congress and Trump demonstrably lied to Mueller about the topic. If Durham wants to argue it was implausible to think Michael Cohen had back channel communications with the Kremlin, then he needs to give Sussmann all the evidence that not only was it not implausible, but it was fact.

I’ve seen no hint that Sussmann’s attorneys want to turn Sussmann’s trial into the trial of Donald Trump’s 2016 campaign that we never got. They seem content to argue that the alleged lie was not material and the evidence that Sussmann lied in the way Durham thinks he did is thin, if not inadmissible.

But Durham has chosen a different path. He has wildly expanded the scope of what kind of questions he think are material to this case. And because he has chosen that dramatically expanded path, he has made all of this evidence material under discovery obligations.

The evidence to prove that the suspicions Sussmann and others had in 2016 were not just justified, but turned out to be true, are now material to discovery. If Durham doesn’t start turning over vast swaths of material about the ties of Trump’s top associates with Russia to Sussmann, he risks dismissal for discovery violations.

Tunnel Vision: Durham Treats Citizens’ Research into Real Paul Manafort Crimes Like a Criminal Conspiracy

On Monday, both John Durham and Michael Sussmann submitted their motions in limine, which are filings to argue about what can be admitted at trial. They address a range of issues that I’ll cover in several posts:

Sussmann:

Durham wants to:

  • Admit witnesses’ contemporaneous notes of conversations with the FBI General Counsel
  • Admit emails referenced in the Indictment and other, similar emails (see this post)
  • Admit certain acts and statements (including the defendant’s February 2017 meeting with a government agency, his December 2017 Congressional testimony, and his former employer’s October 2018 statements to the media) as direct evidence or, alternatively, pursuant to Federal Rule of Evidence 404(b)
  • Exclude evidence and preclude argument concerning allegations of political bias on the part of the Special Counsel (addressed in this post)
  • Admit an October 31, 2016 tweet by the Clinton Campaign

I will link my discussions in serial fashion.


It’s a testament to how deep John Durham is in his conspiracy-driven rabbit hole that he assumes a 24-minute meeting between Marc Elias and Michael Sussmann on July 31, 2016 to discuss the “server issue” pertained to the Alfa Bank allegations. Just days earlier, after all, Donald Trump had asked Russia to hack Hillary Clinton, and within hours, Russian hackers obliged by targeting, for the first time, Hillary’s home office. Someone who worked in security for Hillary’s campaign told me that from his perspective, the Russian attacks on Hillary seemed like a series of increasing waves of attacks, and the response to Trump’s comments was one of those waves (this former staffer documented such waves of attack in real time). The Hillary campaign didn’t need Robert Mueller to tell them that Russia seemed to respond to Trump’s request by ratcheting up their attacks, and Russia’s response to Trump would have been an urgent issue for the lawyer in charge of their cybersecurity response.

It’s certainly possible this reference to the “server” issue pertained to the Alfa Bank allegations. But Durham probably doesn’t know; nor do I. None of the other billing references Durham suggests pertain to the Alfa Bank issue reference a server.

The possibility that Durham is seeing a conspiracy to attack Donald Trump in evidence that could, instead, be evidence of Hillary’s campaign response to an unprecedented nation-state attack, is a worthwhile demonstration of the way the two sides in this case have two entirely different theories of the conspiracy that occurred during that election. That’s particularly apparent given the competing motions in limine seeking both to prohibit and to include a bunch of communications from that period. These motions are not symmetrical. Sussmann moved to,

preclude three categories of evidence and/or arguments that the Special Counsel has suggested it might offer, namely, evidence and arguments concerning: (1) the gathering of DNS data by Mr. Sussmann’s former client Rodney Joffe, and/or other data scientists, and fellow business personnel of Mr. Joffe (collectively “Mr. Joffe and Others”); (2) the accuracy of this data and the accuracy of the conclusions and analysis based on this data; and (3) Christopher Steele and information he separately provided to the Federal Bureau of Investigation (“FBI”) (including the so-called “Steele Dossier”) (all three, collectively, the “Joffe and Steele Conduct”).

Sussmann is not moving to exclude mention his contact with Fusion GPS or reporters (though he is fighting to keep Christopher Steele out of his trial).

Whereas Durham is seeking to,

(ii) admit emails referenced in the Indictment and other, similar emails, (iii) admit certain acts and statements (including the defendant’s February 2017 meeting with a government agency, his December 2017 Congressional testimony, and his former employer’s October 2018 statements to the media) as direct evidence or, alternatively, pursuant to Federal Rule of Evidence 404(b),

[snip]

(v) admit an October 31, 2016 tweet by the Clinton Campaign.

Ultimately this is a fight about whether Sussmann’s alleged lie amounted to reporting a tip about a real cybersecurity anomaly, as Sussmann maintains, or, as Durham argues, seeding dirt as part of a dirty tricks campaign against Trump.

Predictably, in addition to emails involving Fusion GPS, Durham wants to introduce the emails between Rodney Joffe and researchers — emails to which Sussmann was not privy — as statements of co-conspirators.

In addition, Rule 801(d)(2)(E) authorizes the admission of an out-ofcourt statement “by a co-conspirator of a party during the course and in furtherance of the conspiracy.” Where a defendant objects to such an admission, however, the district court must find by a preponderance of the evidence that a conspiracy existed and that the defendant and declarant were members of that conspiracy. Bourjaily v. United States, 483 U.S. 171, 175-76 (1987). A court can preliminarily admit hearsay statements of co-conspirators, subject to connection through proof of conspiracy. See United States v. Jackson, 627 F. 2d 1198, 1218 (D.C. Cir. 1980) (approving procedure). To admit a statement under Rule 801(d)(2)(E), the court must find (i) that there was a conspiracy; (ii) that its members included the declarant and the party against whom the statement is offered; and (iii) that the statement was made during the course of and in furtherance of the conspiracy. Bourjaily 483 U.S. at 175.

Importantly, although Rule 801(d)(2)(E) refers to “conspiracy” and “co-conspirators,” the D.C. Circuit has expressly held that “the doctrine is not limited to unlawful combinations.” United States v. Weisz, 718 F. 2d 413, 433 (D.C. Cir. 1983). “Rather, the rule, based on concepts of agency and partnership law and applicable in both civil and criminal trials, ‘embodies the long-standing doctrine that when two or more individuals are acting in concert toward a common goal, the outof-court statements of one are . . . admissible against the others, if made in furtherance of the common goal.’” United States v. Gewin, 471 F. 3d 197, 201–02 (D.C. Cir. 2006) (citing Weisz, 718 F. 2d at 433)). In quoting and citing the 1974 Senate Advisory Committee note to Rule 801(d)(2)(E), the D.C. Circuit has also explained that “[Rule 801(d)(2)(E)] was meant to carry forward the universally accepted doctrine that a joint venturer is considered as a coconspirator for the purpose of this [R]ule even though no conspiracy has been charged.” Weisz, 718 F. 2d at 433 (citations and quotation marks omitted); United States v. Owens, 484 U.S. 554, 562 (1988) (invoking Advisory Committee note in interpreting Federal Rules of Evidence).

Durham describes that the object of that conspiracy was to deal dirt on Donald Trump to the US government and the media.

As an initial matter, the Government expects that the evidence at trial will show that beginning in late July/early August 2016, the defendant, Tech Executive-1, and agents of the Clinton Campaign were “acting in concert toward a common goal,” Gewin, 471 F. 3d at 201–02, namely, the goal of assembling and disseminating the Russian Bank-1 allegations and other derogatory information about Trump and his associates to the media and the U.S. government.

[snip]

More specifically, these emails show that the researchers and Tech Executive-1 were acting in concert with the defendant and others to gather and spread damaging information about a Presidential candidate shortly before the scheduled election.

And that, Durham claims, makes an attempt to understand a cybersecurity anomaly a political act.

In addition, the aforementioned communications demonstrate the materiality of the defendant’s lie insofar as they reveal the political origins and purposes for this work. And those political origins are especially probative here because they provided a motive for the defendant to conceal his clients’ involvement in these matters.

There is a great deal that is alarming and problematic with this schema. For starters, it suggests Sussmann’s response to Eric Lichtblau’s question asking, “I see Russians are hacking away. any big news?” (in what is clearly a follow-up of earlier conversations about the very real attack on Hillary by Russia) was part of a conspiracy and not a legitimate response to an obvious good faith and important question from a journalist.

Emails, billing records, and testimonial evidence to be offered at trial reflect that during approximately the same time period – and before approaching the FBI about these matters – the defendant provided the Russian Bank-1 allegations to a reporter from a major U.S. newspaper.

Many of the problems in Durham’s argument pertain to April Lorenzen, who started looking into this anomaly in June. But Durham — who also wants to make the source of these anomalies an issue at trial — seems to suggest this conspiracy started on some calls and one meeting between Marc Elias, Joffe, and Sussmann that started on August 12.

Testimony at trial will establish that among the individuals whom Tech Executive1 and Originator-1 enlisted in this project were researchers at University-1 who were assigned to a then-pending federal cybersecurity contract with a U.S. government agency (“Agency-1”). At the time, Tech Executive-1 was negotiating an agreement between his then-employer (“Internet Company-1”) and University-1 to sell large amounts of internet data to the university for use under the Agency-1 contract. The intended purpose of this agreement and University-1’s sensitive work with Agency-1 was to gather and analyze internet metadata in order to detect malicious cyberattacks. As set forth in the Indictment, however, Tech Executive-1 and Originator-1 worked with two of these University-1 researchers (“Researcher-1” and “Researcher-2”) to mine internet data for the purpose of assisting the aforementioned opposition research.

That is, Durham both includes Lorenzen’s earlier actions in his scope, but imagines that the conspiracy in question didn’t form until long after she identified the anomaly.

Similarly, Durham holds Sussmann accountable for the eventual articles written by Lichtblau and Franklin Foer, even though Lorenzen was far more involved in that process (and random people like “Phil” who were signing comments Guccifer 2.0 were also pushing the NYT to write a story). After the FBI killed the initial story, Durham has not shown any evidence that Sussmann was pushing the actual Alfa Bank story until after the Lichtblau and Foer stories were published.

Meanwhile, Durham’s interpretation of this Lorenzen email — written in the wake of Paul Manafort’s firing because his secret influence-peddling for Russian backed Ukrainian Oligarchs had become a campaign liability — is fairly shocking.

NOTE: The Russian money launderers, sometimes assisted by Americans like those you see listed in the PDF [Tech Executive-1] just shared [the Trump Associates List], and others you’ll see in [name redacted]’s next document …. Cyprus is one of the places they like. That’s where [Russian Bank-1]-Forex is organized. Choose .com or .ru when studying their domains … and remember we don’t need a russian IP, domain or company for money to flow from Russians to Trump.

[Russian Bank-1]-* has massive tentacles in so many countries including the USA. Regarding this whole project, my opinion is that from DNS all we could gain even in the best case is an *inference*.

I have not the slightest doubt that illegal money and relationships exist between pro-Russian and pro-Trump, meaning actual people very close to Trump if not himself. And by Putin’s traditional style, people Putin controls, but not himself. He controls the oligarchs and they control massive fortunes and cross nearly all major industries in a vast number of countries.

But even if we found what [Tech Executive-1] asks us to find in DNS we don’t see the money flow, and we don’t see the content of some message saying “send me the money here” etc.

I could fill out a sales form on two websites, faking the other company’s email address in each form, and cause them to appear to communicate with each other in DNS. (And other ways I can think of and I feel sure [Researcher-2] can think of.)

IF [Tech Executive-1] can take the *inference* we gain through this team exercise … and cause someone to apply more useful tools of more useful observation or study or questioning … then work to develop even an inference may be worthwhile.

That is how I understood the task. Because [Tech Executive-1] didn’t tell me more context or specific things. What [name redacted] has been digging up is going to wind up being significant. It’s just not the case that you can rest assured that Hil[l]ary’s opposition research and whatever professional govts and investigative journalists are also digging … they just don’t all come up with the same things or interpret them the same way. But if you find any benefit in what she has done or is doing, you need to say so, to encourage her. Because we are both killing ourselves here, every day for weeks.

I’m on the verge of something interesting with hosts that talk to the list of Trump dirty advisor domain resources, and hosts that talk to [Russian Bank1]-* domains. Take even my start on this and you have Tehran and a set of Russian banks they talk to. I absolutely do not assume that money is passing thru Tehran to Trump. It’s just one of many *inferences* I’m looking at.

SAME IRANIAN IP THAT TALKS TO SOME TRUMP ADVISORS, also talks to:

[list of domains redacted]

(Capitals don’t mean SUPER SIGNIFICANT it was just a heading.)

Many of the IPs we have to work with are quite MIXED in purpose, meaning that a lot of work is needed to WINNOW down and then you will still only be left in most cases with an *inference* not a certainty. Trump/ advisor domains I’ve been using. These include ALL from [Tech Executive-1’s] PDF [the Trump Associate’s List] plus more from [name redacted]’s work:

[list of domains redacted]

[RUSSIAN BANK-1] DOMAINS

[list of domains redacted]

More needs to be added to both lists. [Durham’s bold, my italics]

That’s true in part, because Durham suggests the entirety of this email is part of the conspiracy, but it’s clear that Lorenzen was working with another person, whose name Durham redacts, who seems arbitrarily excluded from it.

But it’s also true because Lorenzen sent it in the wake of Trump’s false claim — made in the same appearance where he asked Russia to hack Hillary some more — that he had no business ties to Russia, when in fact he continued to pursue a Trump Tower deal that would have relied on funding from one of two sanctioned banks. She sent it in the wake of Manafort’s false claims (and Rick Gates’ lies to the press) that served to hide his real ties to Russian-backed oligarchs, including one centrally involved in the Russian effort to tamper in the election, Oleg Deripaska, and his money laundering through Cyprus of payments from those Oligarchs. Manafort was helped in those lies — in the same weeks as Sussmann met with James Baker!!!! — by the son-in-law of Alfa Bank’s co-founder German Khan, Alex Van der Zwaan, who went on to lie about his actions to Mueller. In the same month Sussmann met with Baker, Mueller found probable cause to investigate, Trump got a $10 million infusion from an Egyptian state-owned bank. Lorenzen’s suspicions were not only realistic, but some turned out to be absolutely true.

Similarly, Durham makes much of this email from Lorenzen:

[Tech Executive-1’s] carefully designed actions provide the possibility of: 1. causing the adversaries to react. Stop using? Explain? 2. Getting more people with more resources to find out the things that are unknown, whether those be NON-internet channels of connection between Trump, [Healthcare Company1][owners of Healthcare Company-1], [Russian Bank-1] … money flows, deals, God knows it could be [owners of Healthcare Company-1’s] children married to Russians who run [Russian Bank1]. Or like Researcher-2 shared, someone’s wife vacationing with someone else’s wife.

I have no clue. These are things other people may look into, if they know a direction of interest to look. 3. Legal action to protect our country from people who act against our national interests. I don’t care in the least whether I’m right or wrong about VPN from [Russian Bank-1], [TOR] from Russian Bank-1, or just SMTP artifact pointing to a 3-way connection. [Tech Executive1] has carefully crafted a message that could work to accomplish the goals. Weakening that message in any way would in my opinion be a mistake. [Durham’s bold, my italics]

Here, again, Lorenzen wonders about suspect ties of those married to the children of Alfa Bank’s founders within days of Van der Zwaan taking actions to hide Manafort’s ties to Russian-backed oligarchs.

In other words, Durham treats Lorenzen’s inferences, some of which turned out not just to be right, but to be centrally important to the ongoing Russian attack on the US, as improper dirt on a presidential candidate and not stuff that every citizen of the United States would want to know. Durham is criminalizing a private citizen’s effort (one for which he shows no direct tie to the Clinton campaign) to understand real corruption of Trump and his campaign manager. Durham literally calls this effort to research a political candidate — a core responsibility in a democracy — a “venture to gather and disseminate purportedly derogatory internet data regarding a Presidential candidate.”

This is not the only email that pointed to real criminal evidence pertaining to Russia’s attack in 2016. He cites David Dagon justifying using this data by pointing to the FBI’s investigation into Fancy Bear — the hackers who were in that same month still hacking Hillary and trying to hack election infrastructure.

I believe this is at a threshold of probable cause for violation of Commerce Dept sanctions, FEC elections rules, and has releva[n]cy for the Bureau’s Fancy Bear inquiry, etc._ I also have some graphs/animations of the Trump [] router, which I can clean up and contribute. (They merely give a glimpse of aggregate volume, since we lack actual flows.) I’d need until the weekend.”

Again, Paul Manafort did turn out to have real ties to the APT 28 operation, Roger Stone appears to have been in direct contact with the GRU-backed persona since before it went public, and Mueller did charge an Oligarch with close ties to Putin, Yevgeniy Prigozhin, with violating FEC election rules. To suggest that it was improper to try to investigate these ongoing crimes in real time — to suggest the investigation is itself a conspiracy — undermines any possibility for a vibrant democracy.

And Durham decided belatedly (Sussmann’s filing makes it clear Durham laid all this out in a March 23 404(b) notice, 5 days past his due date) to argue that all these emails are admissible so he can argue that Joffe asked Sussmann to hide his role in all this so he could hide the emails that show real investigation into real, ongoing crimes.

Indeed, many of the emails’ contents are relevant and not hearsay for the additional reason that they shed important light on the defendant’s and Tech Executive-1’s “intent, motive, or state of mind,” and “help to explain their future conduct.” Safavian, 435 F. Supp. at 45–46. In particular, the mere fact that these emails (i) existed in written form prior to the defendant’s September 19, 2016 meeting with the FBI and (ii) reflected instances of serious doubts about whether the Russian Bank-1 data might have been “spoofed,” a “red herring,” “wrong,” or a product of “tunnel vision” or bias against Trump, provided Tech Executive-1 and the defendant with motive to conceal the origins and provenance of the Russian Bank-1 allegations from the FBI. In particular, a reasonable jury could infer from these and other facts that Tech Executive-1 made the defendant aware of these prior doubts and therefore supplied the defendant – as Tech Executive-1’s representative – with a motive to conceal their client relationship from the FBI General Counsel. A jury could similarly infer that even if Tech Executive-1 did not make the defendant aware of these communications, he nevertheless instructed the defendant to deny the existence of such a client relationship for the same reason (i.e., to avoid the FBI’s potential discovery of the doubts reflected in these prior discussions).

Durham’s conspiracy theorizing is not just a dangerous attack on citizenship. It is also cherry picking. He has left out a number of the people who were pursuing the DNS question, including those — Matt Blaze and others — whom Sussmann said he had consulted with in his meeting with Baker, but put in people that Sussmann did not even know.

Sussmann notes he wasn’t involved in any of this data-gathering, nor was the Clinton campaign.

There cannot be any credible argument that the data-gathering sheds light on Mr. Sussmann’s representation of Mr. Joffe, because there is no evidence that Mr. Sussmann was involved in the data-gathering or that it was being done to give to Mr. Sussmann, as Mr. Joffe’s counsel. It is just as specious to suggest that the data-gathering bears on Mr. Sussmann’s attorney-client relationship with the Clinton Campaign. There is no evidence that the Clinton Campaign directed or was involved in the gathering of data, via Mr. Sussmann or otherwise. Nor is there any evidence of communications on issues pertinent to the Indictment between Mr. Joffe and the Clinton Campaign. As such, the manner in which data was gathered has no bearing on Mr. Sussmann’s attorney-client relationship with the Clinton Campaign.

In what is likely to be a persuasive argument to Judge Cooper, Sussmann argued that the only thing that can be relevant to the charge against him — a false statements charge, not conspiracy to defraud the US — is his state of mind.

Evidence that lacks a connection to the charge or the defendant’s scope of knowledge, including as to the defendant’s state of mind, is decidedly not relevant. See, e.g., United States v. Wade, 512 F. App’x 11, 14 (2d Cir. 2013) (excluding testimony about another act because it “was not temporally or physically linked” to the crime at issue and the “testimony presented a risk of juror confusion and extended litigation of a collateral matter”); United States v. Libby, 467 F. Supp. 2d 1, 15-16 (D.D.C. 2006) (rejecting attempts to “elicit . . . what others were told” as “simply irrelevant to the defendant’s state of mind” in a false statements and perjury case); United States v. George, 786 F. Supp. 56, 64 (D.D.C. 1992) (without the “crucial link” that “defendant knew what information others had,” that information is not material to the defendant’s state of mind in an obstruction and false statements case); United States v. Secord, 726 F. Supp. 845, 848-49 (D.D.C. 1989) (information of which the defendant had no knowledge is necessarily immaterial to the defendant’s state of mind, intent, or motive in a false statements case).

[snip]

First, evidence regarding the accuracy of the data or the conclusions drawn from that data is simply irrelevant to the false statement charge against Mr. Sussmann. Mr. Sussmann is not charged with defrauding the government or with a conspiracy to do that or anything else. There is no allegation or evidence that Mr. Sussmann was privy to any of the communications between Mr. Joffe and Others about the data or its analyses that the Special Counsel misleadingly cites in the Indictment.

I think Durham’s bid to include communications with those (Lorenzen and Manos Antonakakis) Sussmann did not have direct contact with is likely to fail. So most of Durham’s conspiracy theorizing will likely remain on the pages of these filings.

But along the way, Durham’s tunnel vision about 2016 led him to forget to exclude the things that do go to Sussmann’s state of mind, such as the very real Russian attack on Hillary Clinton and Donald Trump’s public call for more such attacks.

So while Durham may be excluded from claiming that a private citizen’s attempt to learn about real crimes by a Presidential candidate before he is elected amounts to a criminal conspiracy, it is too late for Durham now to try to exclude evidence about Sussmann’s understanding of Donald Trump’s very real role in a hack of his client.

The Evidence Needed for a Trump Prosecution

It would be easier to prosecute Trump for January 6 than Peter Navarro. I say that (in advance of today’s debate about referring Navarro and Dan Scavino for contempt) because it is far easier to tie Trump’s actions directly to the successful obstruction of the vote certification on January 6 than it would Navarro’s, and Navarro’s actions are fairly tangential to the proof that Trump’s actions met the elements of obstruction of the vote certification.

Months ago, I laid out how to prosecute Trump using the framework that DOJ has already used with hundreds of January 6 defendants. But in this post, I will show how much evidence DOJ has already collected proving the case against Trump by using the framework for Trump’s criminal exposure laid out by Judges Amit Mehta and David Carter, incorporating a key point made by Judge Reggie Walton.

In his opinion upholding the lawsuits against Trump, Amit Mehta found that it was plausible Trump conspired with the militias and also that he bore aid-and-abet liability for assaults at the Capitol (see this post and this post). He found that:

  • Trump and the militias jointly pursued an effort to disrupt the vote certification
  • Trump planned the unpermitted march to the Capitol
  • Trump encouraged the use of force and threats to thwart the certification from proceeding
  • Trump knew supporters would respond to his calls to come to DC and march on the Capitol
  • Trump called for collective action
  • Trump intended his “fight like hell” comment to be taken literally and rioters did take it literally
  • Trump ratified the riot

In his opinion finding that one email from John Eastman must be turned over to the January 6 Committee on a crime-fraud exception (see this post), Carter laid out the following proof that Trump obstructed the vote certification:

  • Trump tried to persuade Pence to disrupt the vote certification
  • He publicly appealed to Pence to do so
  • He called on his followers to walk to Congress to pressure Pence and Congress

Carter laid out this evidence that Trump had corrupt intent:

  • Proof that he had been told the vote fraud claims were false and his own request of Brad Raffensperger showed he knew he had lost
  • Trump had been told the Eastman’s plan was not legal

Carter laid out this evidence he had entered into a conspiracy:

  • Trump held lots of meetings to talk about plans to obstruct the vote count
  • Trump ratified Eastman’s plan in his Ellipse speech

To those two frameworks finding that Trump probably conspired to obstruct the vote certification, Judge Walton held that you cannot point to back-room plotting to get to the intentions of the actual rioters; you can only look at what the rioters themselves accessed, Trump’s public speech and Tweets (see this post).

This table (which is still very much a work in progress) lays out what evidence would be needed to prosecute Trump. The horizontal Elements of 1512(c)(2)/Relevant to Motive and Co-Conspirators sections show what is necessary given the elements of the offense as laid out by the judges and in DOJ filings, versus what might provide evidence of a broader conspiracy. The Must Have/Nice to Have columns show that for each kind of proof, there’s what is necessary and what would be really useful before indicting a former President.

In other words, the things in the yellow boxes are the things that would be necessary to show that Trump obstructed the vote certification. They basically amount to proof that things that Trump did brought the rioters to DC and to the Capitol and that he had the corrupt mens rea to charge with obstruction. I include there proof that Trump conspired with the militias, which I consider necessary because the Proud Boys, especially, took the bodies that Trump sent them and made those bodies tactically effective.

While prosecutors are still working on tying Roger Stone to both militias and tying Alex Jones and Ali Alexander into the crimes at the Capitol, much of the rest of this evidence has already been collected and rolled out in charging papers. For example, I showed some of the proof that rioters responded to Trump’s attacks on Pence by targeting their own attacks on Pence. There are a number of Trump comments that directly led hundreds of rioters to start making plans to come to DC, including arming themselves; NYT recently laid out the most central communication, a Tweet on December 19, 2020, though not only is that focus not new, it’s the tweet and response to which Arieh Kovler predicted the attack on the Capitol in real time.

A number of the other things you’d want to have before you charged Trump are available to DOJ:

  • Details of how the march to the Capitol happened and why it — and Ali Alexander’s permitted rallies at the Capitol — made a riot more likely
  • Explanations why Ellipse rally organizers balked at including people like Ali Alexander and Roger Stone
  • Testimony from Pence’s aides about how Trump pressured his Vice President in private

It is true that the testimony of several people — those involved in selling the Big Lie and Scavino’s coordination of the riot (including a particular focus on The Donald) — would be really useful. But that testimony is as important to proving that they were part of the conspiracy along with Trump.

Pat Cipollone’s tesitmony would be incredibly useful to that case, too. Normally, he could invoke privilege, but Trump already waived some of that privilege by sharing details about his conversations with Cipollone with Sean Hannity. If Cipollone did cooperate with DOJ, I don’t think he would leak that.

Similarly, the Relevant to Motive and Co-Conspirators rows — showing Trump’s coordination with Congress or his prior planning of it — would be really useful to have in prosecuting Trump. But ultimately, as Judge Walton held, what Trump did in private could not have influenced most of the rioters, because they never knew those details. As such, some of that information — precisely the kinds of stuff that TV lawyers say would be the first overt signs that Trump was a subject of the investigation — is more useful for including others in the conspiracy.

The most important of this evidence — communications from the December 18 meeting and comms during the day of the riot — are already in DOJ’s possession from Rudy’s seized phones, whether or not they obtained a warrant for that content yet.

Update: I’ve tweaked the horizontal headings on the table to clarify that the top half of the table stems from the elements of offense for 1512(c)(2), whereas the bottom half is clearly related and may help prove mens rea or incorporate other co-conspirators, but is not necessary (in my opinion) to meeting the elements of obstruction.

On Enrique Tarrio’s Complex Password and Other Reasons the January 6 Investigation Can Now Move to Organizer-Inciters

A Wednesday filing in the Proud Boy leadership conspiracy revealed that, between cracking his password and conducting a filter review, DOJ had not been able to access Enrique Tarrio’s phone — which was seized even before the riot he allegedly had a central role in planning — until mid-January.

On January 4, 2021, Tarrio was arrested in Washington, D.C., and charged with destruction of property for his December 12, 2020, burning of a #BLACKLIVESMATTER banner and possession of two large capacity magazines. At the time of his arrest, Tarrio’s phone was seized by law enforcement. The government promptly sought a search warrant for that device in this investigation. Despite diligence, the government was not able to obtain access to Tarrio’s phone until December 2021. Thereafter, a filter team was utilized to ensure that only non-privileged materials were provided to the investigative team. The investigative team did not gain access to the materials on the phone until mid-January 2022, and it has worked expeditiously since that time to review these materials.

I can think of just a few other phones that have been this difficult for FBI to access (those of Zachary Alam and Brandon Fellows are others). The delay means that the very first phone DOJ seized pertaining to the January 6 investigation was one that, to date, has taken the longest to access.

This is the kind of delay — presumably due to the physics involved in cracking a complex password and the due process of a privilege review — that is unavoidable. Yet it stalled DOJ’s efforts in the most pivotal conspiracy case as it tries to move from rioters at the Capitol through organizer-inciters to Trump himself.

The delay in accessing Tarrio’s phone is one thing to keep in mind as you read the multiple reports that DOJ has sent out subpoenas to people who organized the rallies. WaPo reported that these subpoenas first started going out two months ago — so late January, shortly after the time DOJ accessed Tarrio’s phone content. NYT reported that the subpoenas focus on the rallies and the fake electors.

One of the subpoenas, which was reviewed by The New York Times, sought information about people “classified as VIP attendees” at Mr. Trump’s Jan. 6 rally.

It also sought information about members of the executive and legislative branches who had been involved in the “planning or execution of any rally or any attempt to obstruct, influence, impede or delay” the certification of the 2020 election.

And it asked about the effort by Trump supporters to put forward alternate slates of electors as Mr. Trump and his allies were seeking to challenge the certification of the Electoral College outcome by Congress on Jan. 6.

Another person briefed on the grand jury investigation said at least one person involved in the logistics of the Jan. 6 rally had been asked to appear.

None of this is a surprise or unexpected. Dana Nessel formally referred Michigan’s fake electors to DOJ for investigation (the kind of referral that may have been important to DOJ assuming jurisdiction in state elections) on January 18, and Lisa Monaco confirmed DOJ was investigating the fake electors on January 25.

As to the organizers, on December 16, I wrote a piece describing that DOJ would need to turn to “organizer-inciters” next — people like Alex Jones, who had a central role in turning rally-goers who imagined themselves to be peaceful protestors into an occupying force. We know of several other pieces of evidence that would have been important, if not necessary, to lock down before DOJ moved to those organizer-inciters.

For example, DOJ likely first obtained direct information about tensions involving VIPs in Brandon Straka’s first and second FBI interviews in February and March of last year, information that the government claimed during his sentencing provided valuable new leads. Straka was one of those VIPs who expected to have a speaking slot on January 6 only to discover all he was getting was a seat at the front, next to Mike Flynn. Access to his phone would have provided the government comms depicting growing tensions tied to the extremism of Nick Fuentes and Ali Alexander described in this ProPublica article.

“Is Nick Fuentes now a prominent figure in Stop the Steal?” asked Brandon Straka, an openly gay conservative activist, in a November text message, obtained exclusively by ProPublica. “I find him disgusting,” Straka said, pointing to Fuentes’ vehemently anti-LGBT views.

Alexander saw more people and more power. He wrote that Fuentes was “very valuable” at “putting bodies in places,” and that both Jones and Fuentes were “willing to push bodies … where we point.”

Straka, Fuentes and Jones did not respond to requests for comment.

Straka was part of a Stop the Steal listserv on which Michael Courdrey and Alexander were on the day of the riot.

The Stop the Steal group chat shows a reckoning with these events in real time.

“They stormed the capital,” wrote Stop the Steal national coordinator Michael Coudrey in a text message at 2:33 p.m. “Our event is on delay.”

“I’m at the Capitol and just joined the breach!!!” texted Straka, who months earlier had raised concerns about allying with white nationalists. “I just got gassed! Never felt so fucking alive in my life!!!”

Alexander and Coudrey advised the group to leave.

“Everyone get out of there,” Alexander wrote. “The FBI is coming hunting.”

The government described learning new information about Straka as recently as December 8 followed up in a January 2022 interview. Some of this appears to have been a late discovery of his own grift and, possibly, his role in inciting a riot at the TCF center in Michigan. But at sentencing, prosecutors reaffirmed that the sealed contents of his cooperation remained valuable.

Some other existing defendants whose phone and/or cooperation could provide such insight are Simone Gold (who pled guilty in early March but who had not yet done her FBI interview) and Alan Hostetter and Russell Taylor; prosecutors described still providing primary discovery in the latter case the other day, meaning they’re still getting phone contents there, too.

Tarrio’s phone would include comms with many of the people DOJ has turned its focus to; he had known communications with Alex Jones, Ali Alexander, and Cindy Chafian, to say nothing of his close ties to Roger Stone.

In addition to Tarrio’s phone, exploiting that of Stewart Rhodes — seized in May — took some time because he had so many Signal texts that it was an extended process sorting through the inculpatory and exculpatory ones.

The hold up on Rhodes’ phone is one of the things that held up his own arrest and charges for Seditious Conspiracy. In that superseding indictment, DOJ completely hid what new information they had learned about the Oath Keeper ties with the Willard planners.  But the seditious conspiracy charge (along with the cooperation of Mark Grods) appears to have persuaded Joshua James to flip. James’ cooperation would provide lots of new testimony about what Stone and other VIPs were doing on January 5 and 6, including an explanation as to why James felt he needed to call into Mike Simmons to report on what is almost certainly Stone’s anger about the sidelining of his extremist group at the main rally, something clearly at issue in these recent subpoenas.

James would have proffered before he pled guilty (meaning prosecutors would have know what he would say if he did plead), but they would hold off on using his testimony for legal process until he testified before a grand jury in conjunction with his plea on March 2.

Public reporting has revealed that both the January 6 and DOJ investigations have obtained at least some of the documentary footage implicating Tarrio and Stone from the day of the riot.

And if the January 6 committee works like the SSCI investigation into Russia, it could share transcripts from obviously problematic testimony with DOJ. Ali Alexander spent most of day telling a story to the committee that had already been debunked by DOJ.

On the anniversary of January 6, Merrick Garland explained that all of the arrests from the first year had laid the foundation for more complex cases.

We build investigations by laying a foundation. We resolve more straightforward cases first because they provide the evidentiary foundation for more complex cases.

Investigating the more overt crimes generates linkages to less overt ones. Overt actors and the evidence they provide can lead us to others who may also have been involved. And that evidence can serve as the foundation for further investigative leads and techniques.

In circumstances like those of January 6th, a full accounting does not suddenly materialize. To ensure that all those criminally responsible are held accountable, we must collect the evidence.

We follow the physical evidence. We follow the digital evidence. We follow the money.

This is the kind of thing he was talking about: working your way up through Mark Grods to Joshua James to Stewart Rhodes to Roger Stone, taking the time to crack and exploit Tarrio’s phone, exploiting early access to Straka’s comms to get to the organizers. The investigation “aperture” hasn’t changed; what has changed is DOJ has acquired information it needed before it could take the next step.