Posts

The Kiddie Porn and the UndieBomb

/4 Comments/in , /by

Screen shot 2013-09-26 at 1.22.11 PMI was at a funeral Monday and Tuesday. So when I heard the FBI had busted the guy who leaked the UndieBomb 2.0 story, I assumed they had finally arrested John Brennan.

But, as bmaz emphasized in his post on Donald Sachtleben’s plea agreement, there’s no hint of prosecuting Brennan, who leaked Top Secret details about the British/Saudi double agent into AQAP, even while they’re imprisoning Donald Sachtleben, who is only accused of leaking details he knew to be Secret.

A law enforcement official indicated that the case has not been officially closed but the charges against Sachtleben are the only ones expected.

(Sure, the evidence that Sachtleben was involved with kiddie porn seems solid, but then Brennan drone-killed children, so he’s not above reproach for his treatment of children either.)

But that is by no means the weirdest thing about the government’s treatment of the UndieBomb 2.0 leak investigation.

The entire premise of the FBI narrative is that they exercised greater care with a kiddie porn accusee they had dead to rights than they did the 100 or so AP reporters who got sucked up in their overbroad dragnet. They would have you believe that, even after seizing a CD holding a November 2, 2006 SECRET CIA intelligence report at Sachtleben’s house in May 2012 pursuant to a kiddie porn warrant (which they have not produced in the docket), they just sat on his devices for almost a year until they obtained the phone records for 20 AP phone lines, in a seizure far more intrusive into journalism than any recent known subpoena.

Sachtleben was identified as a suspect in the case of this unauthorized disclosure only after toll records for phone numbers related to the reporter were obtained through a subpoena and compared to other evidence collected during the leak investigation. This allowed investigators to obtain a search warrant authorizing a more exhaustive search of Sachtleben’s cell phone, computer, and other electronic media, which were in the possession of federal investigators due to the child pornography investigation.

(I may be mistaken, but I don’t think the FBI made this claim in any court document, so I assume it is bullshit, especially since they had had to do extensive forensic searches of Sachtleben’s computer and he had already signed a plea deal forfeiting it.)

They would also have you believe the AP had no inkling of the UndieBomb plot until ABC reported inflammatory claims about cavity bombs on April 30, 2012, even in spite of ABC’s reference to TSA head John Pistole’s earlier fear-mongering about it and in spite of additional reporting about broad Air Marshall mobilization. DOJ goes to great lengths to make you believe AP first texted Sachtleben on April 30 and not, say, on April 28 (which would mean the kiddie porn investigation accelerated after such contact), though there’s no reason to believe that’s true and the AP call records DOJ obtained apparently go back to well before April 30. They also suggest AP was asking Sachtleben about an Asiri bomb, though the first text they include is an assertion — not a question — that Asiri has been busy.

They would have you believe that two Pulitzer Prize winners would defy White House and CIA wishes with a story sourced to a single source who, just a day earlier, had provided a mistaken guess about the excitement. Read more →

Dear Eric Holder: You’re Doing Recusal Wrong

/21 Comments/in , , /by

Let me start this post by saying I think it is absolutely appropriate for Eric Holder to have recused himself from the UndieBomb 2.0 investigation, in part because — as someone read into the UndieBomb 2.0 operation, he was interviewed by the FBI (though so was James Cole, who is now in charge of the investigation), and he turned over his own phone contacts to the FBI — but also because top Administration officials like John Brennan at least should be under close scrutiny in this investigation.

Nor do I think, in his recusal, Eric Holder did anything in bad faith. I have zero reason to believe Holder is tampering with this investigation, in any way shape or form.

But Jeebus, Holder is doing this entire recusal thing wrong.

That’s true, first of all, because with a rabid Congress (at the time he recused from the investigation and now) accusing him of wrongly delegating this investigation to Ronald Machen in an investigation that could net incredibly powerful people as suspects, Holder did not write his recusal — or a delegation of authority of Attorney General powers — to James Cole, who is overseeing the investigation.

Now, Holder claims not to remember whether he memorialized his recusal in past cases, including the John Edwards investigation — the most high profile case in which he has recused. And though George Holding, who conducted that investigation and now represents the Raleigh, NC, area in Congress, was in the room, I’m not sure they clarified whether he had written anything down there, either. Holder was, however, very clear about what authorities he delegated to Patrick Fitzgerald when he investigated the John Adams Society, which led to the prosecution of John Kiriakou, having sent 3 letters (1, 2, 3) memorializing the limits of Fitz’ authority.

I think part of the problem is that Holder didn’t really appoint special counsels to investigate this matter, even while he made a big deal of appointing the people who — US Attorney for DC Ronald Machen’s appointment rather then US Attorney for Eastern District of VA Neil MacBride aside — would have been investigating it anyway. Dumb. Congress was screaming for some kind of formality, and Holder didn’t establish that formality.

And then there’s the journalist-subpoenaing precedent of the Plame investigation where Fitz several times got letters clarifying his authority. The first of those reads,

By the authority vested in the Attorney General by law, including 28 U. S .C. §§ 509, 510, and 515, and in my capacity as Acting Attorney General pursuant to 28 U.S.C. § 508, I hereby delegate to you all the authority of the Attorney General with respect to the Department’s investigation into the alleged unauthorized disclosure of a CIA employee’s identity, and I direct you to exercise that authority as Special Counsel independent of the supervision or control of any officer of the Department.

This came in handy later in the investigation when Libby’s lawyers challenged Fitz’ authority.

Then, Holder’s recusal hasn’t been very strict. Most troublingly, Eric Holder reviewed the letter James Cole sent to the AP (though Holder saw a draft which, according to his press conference, included things like details on the specific scope of the subpoena that don’t appear in the final letter). NPR’s Carrie Johnson asked him about this.

Johnson: Is that normal practice when you’re recused from a case?

Holder: No, I just wanted to see the le–I saw I mean I saw saw the draft letter this morning. And I just wanted to have an opportunity to see what it looked like so I’d have at least some sense of the case in case there were things in the letter that I could talk about with the press.

Reviewing this letter — particularly before changes got made to it!! (changes which appear to have deprived the AP of full notice of the call record grab) — simply isn’t appropriate for someone recused from the case!

Again, I’m not suggesting malice here.

But the AP has already — rightly, in my opinion — challenged whether DOJ complied with its own guidelines on media subpoenas. In particular, AP complained that they had not been given notice and an opportunity to cooperate. That’s one of the guidelines that requires AG involvement.

Negotiations with the affected member of the news media shall be pursued in all cases in which a subpoena for the telephone toll records of any member of the news media is contemplated where the responsible Assistant Attorney General determines that such negotiations would not pose a substantial threat to the integrity of the investigation in connection with which the records are sought. Such determination shall be reviewed by the Attorney General when considering a subpoena authorized under paragraph (e) of this section.

Yet the guy who signed this subpoena and with it signed off on the claim that alerting AP to the subpoena would do grave damage to the investigation  — James Cole — apparently has no piece of paper giving him authority to sign it.

If DOJ ultimately decides to charge the AP’s sources, if that person has the kind of legal representation DC bigwigs often have, I fully expect them to challenge every bit of their prosecution. After all, by subpoenaing the AP, Cole claimed that DOJ could not get the information from any other source. So if AP’s sources are indicted, they can rest assured that their prosecution went through this bottleneck of an Acting AG who had no paperwork to prove he had the authority to sign off on the claims he was making to get information he was certifying was absolutely necessary to find them. And from this subpoena forward, everything else will be fruit of a tainted AG, at least if you’ve got fancy lawyers.

Dumb.

One last thing. Also in today’s hearing, Holder admitted that it probably would have been a good idea to write down this recusal thing in public. Which, if they do ever charge AP’s sources and if said sources have the resources to make this obvious challenge, they’ll cite in court to document that even the guy who delegated this authority thinks it would be smarter if he did so in writing.

Seriously, this entire recusal process has been an own goal. As I said, I don’t think DOJ is pulling anything fishy. But the entire point of recusing is to ensure there’s proof nothing fishy happened. And in this case, DOJ has anything but.

The AP Grab: NSL versus Subpoena

/36 Comments/in , , /by

Update: In his letter responding to AP’s complaints, Deputy Attorney General James Cole says these were subpoenas. Cole tries to argue the scope of the subpoena was fair. But what he doesn’t explain is why the government didn’t give the AP notice or an opportunity to turn over the contacts voluntarily.

I want to return to a question I introduced in my post describing DOJ’s grab of call records from 20 AP phone lines.

The assumption has been that DOJ subpoenaed these call records. While that’s probably right, I still think it’s possible DOJ got them via National Security Letter, which DOJ has permitted using to get journalist contacts in national security investigations since fall 2011. I’ll grant that AP President Gary Pruitt mentions subpoenas twice in his letter, once specifically in connection with DOJ’s grab and once more generally.

That the Department undertook this unprecedented step without providing any notice to the AP, and without taking any steps to narrow the scope of its subpoenas to matters actually relevant to an ongoing investigation, is particularly troubling.

The sheer volume of records obtained, most of which can have no plausible connection to any ongoing investigation, indicates, at a minimum, that this effort did not comply with 28 C.F.R. §50.10 and should therefore never have been undertaken in the first place. The regulations require that, in all cases and without exception, a subpoena for a reporter’s telephone toll records must be “as narrowly drawn as possible.’’ This plainly did not happen. [my emphasis]

But the entire point of Pruitt’s letter is to call attention to the way in which DOJ did not honor the spirit of its media guidelines, which are tied to subpoenas, not NSLs. That’s what the Domestic Investigations and Operations Guide says explicitly (PDF 166) when it talks about using NSLs with journalists: when using NSLs, the rules don’t apply.

Department of Justice policy with regard to the issuances of subpoenas for telephone toll records of members of the news media is found at 28 C.F.R. § 50.10. The regulation concerns only grand jury subpoenas, not National Security Letters (NSLs) or administrative subpoenas. (The regulation requires Attorney General approval prior to the issuance of a grand jury subpoena for telephone toll records of a member of the news media, and when such a subpoena is issued, notice must be given to the news media either before or soon after such records are obtained.) The following approval requirements and specific procedures apply for the issuance of an NSL for telephone toll records of members of the news media or news organizations. [my emphasis]

For a variety of reasons, I think it possible the AP doesn’t actually know how DOJ got its reporters’ contact information. And thus far, the most compelling argument (one Julian Sanchez made) that DOJ used a subpoena is that they did ultimately disclose the grab to the AP; with NSLs they wouldn’t have to do that, at least certainly not in the same time frame.

But Pruitt’s emphasis is sort of why I’m interested in this question: either DOJ used a subpoena and in so doing implicitly claims several things about its investigation, or DOJ used an NSL as a way to bypass all those requirements (and use this as a public test case of broad new self-claimed authorities). Both could accomplish the same objective — getting call records with a gag order — but each would indicate something different about how they’re approaching this investigation.

Here are DOJ’s own regulations about when and how they can subpoena a journalist or his call records. Some pertinent parts are:

(b) All reasonable attempts should be made to obtain information from alternative sources before considering issuing a subpoena to a member of the news media, and similarly all reasonable alternative investigative steps should be taken before considering issuing a subpoena for telephone toll records of any member of the news media.

(d) Negotiations with the affected member of the news media shall be pursued in all cases in which a subpoena for the telephone toll records of any member of the news media is contemplated where the responsible Assistant Attorney General determines that such negotiations would not pose a substantial threat to the integrity of the investigation in connection with which the records are sought. Such determination shall be reviewed by the Attorney General when considering a subpoena authorized under paragraph (e) of this section.

(g)(1) There should be reasonable ground to believe that a crime has been committed and that the information sought is essential to the successful investigation of that crime. The subpoena should be as narrowly drawn as possible; it should be directed at relevant information regarding a limited subject matter and should cover a reasonably limited time period.

(g)(3) When the telephone toll records of a member of the news media have been subpoenaed without the notice provided for in paragraph (e)(2) of this section, notification of the subpoena shall be given the member of the news media as soon thereafter as it is determined that such notification will no longer pose a clear and substantial threat to the integrity of the investigation. In any event, such notification shall occur within 45 days of any return made pursuant to the subpoena, except that the responsible Assistant Attorney General may authorize delay of notification for no more than an additional 45 days. [my emphasis]

US Attorney Ronald Machen statement about the grab largely echoes those parts of the regulations (though somehow he forgot to mention that “subpoenas should be as narrowly drawn as possible”).

We take seriously our obligations to follow all applicable laws, federal regulations, and Department of Justice policies when issuing subpoenas for phone records of media organizations. Those regulations require us to make every reasonable effort to obtain information through alternative means before even considering a subpoena for the phone records of a member of the media. We must notify the media organization unless doing so would pose a substantial threat to the integrity of the investigation. Because we value the freedom of the press, we are always careful and deliberative in seeking to strike the right balance between the public interest in the free flow of information and the public interest in the fair and effective administration of our criminal laws.

So either DOJ used an NSL, which would give them a longer gag, fewer express limits on the scope of the request, and zero expectation of giving notice beforehand (in addition, obtaining NSLs from journalists in national security cases doesn’t appear to require Attorney General sign-off). In which case Machen is playing the same kind of word games the DIOG plays, acknowledging there are regulations the spirit of which DOJ appears to have violated.

Or Machen maintains the following about the grab:

  • DOJ has already checked the US person call records of the people known to be read into the UndieBomb plot and not found any obviously calls or emails implicating the journalists involved in the story and either hasn’t been able to access or hasn’t found any obvious clues in the potential Saudi, Yemeni, and British people read into the operation (note, some Saudis were on the record on this within days and Yemenis also appear to have leaked it).
  • Notifying the AP that DOJ was going to go get journalist contact information for two months, in an investigation that has been widely publicized for an entire year, would pose some threat to the investigation. Normally, such a claim is usually based on the premise that revealing the investigation at all would alert the targets who would otherwise not know about it, but that’s obviously not what’s going on here, because this has been one of the most public leak investigations in recent years.

Read more →

“A Full Two Month Period” that Covers John Brennan’s Entire Drone Propaganda Campaign

/31 Comments/in , /by

In his letter to Eric Holder, AP’s President Gary Pruitt emphasized how inexcusably overbroad the call record seizure had been.

Last Friday afternoon, AP General Counsel Laura Malone received a letter from the office of United States Attorney Ronald C. Machen Jr. advising that, at some unidentified time earlier this year, the Department obtained telephone toll records for more than 20 separate telephone lines assigned to the AP and its journalists. The records that were secretly obtained cover a full two-month period in early 2012 and, at least as described in Mr. Machen’s letter, include all such records for, among other phone lines, an AP general phone number in New York City as well as AP bureaus in New York City, Washington, D.C., Hartford, Connecticut, and at the House of Representatives. This action was taken without advance notice to AP or to any of the affected journalists, and even after the fact no notice has been sent to individual journalists whose home phones and cell phone records were seized by the Department. [my emphasis]

AP’s most recent story on the seizure seems to suggest that “full two-month period” spanned April and May of last year.

In all, the government seized the records for more than 20 separate telephone lines assigned to AP and its journalists in April and May of 2012.

If so, it means the government grabbed phone records for Adam Goldman,  Matt Apuzzo, Kimberly Dozier, Eileen Sullivan, and Alan Fram for three weeks after (and five weeks before) the UndieBomb 2.0 story Goldman and Apuzzo by-lined.

That would mean they’d get the sources for this Kimberly Dozier story published May 21 which starts,

White House counterterror chief John Brennan has seized the lead in guiding the debate on which terror leaders will be targeted for drone attacks or raids, establishing a new procedure to vet both military and CIA targets.

The move concentrates power over the use of lethal U.S. force outside war zones at the White House.

The process, which is about a month old, means Brennan’s staff consults the Pentagon, the State Department and other agencies as to who should go on the list, making a previous military-run review process in place since 2009 less relevant, according to two current and three former U.S. officials aware of the evolution in how the government targets terrorists.

Within 10 days of the time Dozier published that story, John Brennan had rolled out an enormous propaganda campaign — based on descriptions of the drone targeting process that Brennan’s power grab had replaced, not the new drone targeting process — that suckered almost everyone commenting on drones that drone targeting retained its previous, more deliberative, targeting process, the one Brennan had just changed.

And that propaganda campaign, in turn, hid another apparent detail: that UndieBomb 2.0, a Saudi sting had actually occurred earlier in April, and that UndieBomb 2.0 preceded and perhaps justified the signature strikes done at the behest of the Yemenis (or more likely the Saudis).

April 18: Greg Miller first reports on debate over signature strikes

Around April 20: UndieBomb 2.0 device recovered

Around April 22: John Brennan takes over drone targeting from JSOC

April 22: Drone strike that–WSJ reports, “Intelligence analysts [worked] to identify those killed” after the fact, suggesting possible signature strike

April 24: Robert Mueller in Yemen for 45 minute meeting, presumably to pick up UndieBomb

April 25: WSJ reports that Obama approved use of signature strikes

April 30: John Brennan gives speech, purportedly bringing new transparency to drone program, without addressing signature strikes

May 6: Fahd al-Quso killed

May 7: AP reports on UndieBomb 2.0

May 8: ABC reports UndieBomb 2.0 was Saudi-run infiltrator

May 15: Drone strike in Jaar kills a number of civilians

Now, frankly, I think the witch hunt response to the UndieBomb 2.0 plot was mostly just an excuse to start investigating the AP, though it did lead John Brennan to make it clear that it was a Saudi-manufactured plot in the first place.

But the response to that Dozier article, which provided the final piece of evidence for the timeline above showing Brennan grabbed control of drone targeting at roughly the moment we started signature strikes in Yemen, was more dramatic, at least in terms of the breathtaking propaganda the White House rolled out to pretend the drone strikes were more orderly than they actually were.

I’m guessing, but when Pruitt says this,

These records potentially reveal communications with confidential sources across all of the newsgathering activities undertaken by the AP during a two-month period, provide a road map to AP’s newsgathering operations, and disclose information about AP’s activities and operations that the government has no conceivable right to know.

I’m guessing he might have other AP stories in mind.

I know I’m as least as worried about DOJ targeting Dozier’s sources, who revealed a critical detail of how illegal the drone program was, as I am about the original UndieBomb 2.0 story.

Why Isn’t Neil MacBride Investigating the Alleged UndieBomb 2.0 Leak?

/3 Comments/in /by

I’ll have more general comments about today’s Senate Judiciary Committee oversight scrum and what it says about leak investigations. But I want to note a very small point Eric Holder made.

When trying to explain to the Republicans why it made sense for DC US Attorney Ronald Machen and Maryland US Attorney Rod Rosenstein, he said there parts of the matters under investigation in their districts. In other words, he assigned the US Attorneys according to jurisdiction (or, to be cynical, he just made a big show of having the people who should investigate these matters anyway investigate them).

But consider. The three alleged leaks that might be investigated are:

  • UndieBomb 2.0
  • StuxNet
  • Drone targeting

Now, StuxNet is easy. Rosenstein’s district includes NSA; StuxNet is a NSA project; therefore it’s probably safe to assume he’s investigating that alleged leak.

Then things get confusing. It would make sense to investigate drone targeting in DC, which is where stories portrayed the Terror Tuesday meetings occurring, and therefore to have Machen lead that investigation, and that may well be happening. Though drone targeting is the one alleged leak that public reports haven’t made clear have been included in the scope of the investigations. Let’s just assume that if drone targeting is being investigated, it is being done by Machen.

I’m more confused still about who is investigating the UndieBomb 2.0 alleged leak. There seems to be little doubt that alleged leak is being investigated. But why isn’t being investigated in Eastern District of VA?

CIA thwarted a plot!!! the headlines read, until it became clear that it was really a Saudi investigation and it wasn’t a plot but a sting. Yet the CIA was definitely involved, at least according to all the reporting on the story. And the US Attorney from EDVA–Neil MacBride–would have a jurisdiction over CIA issues that is just as strong as the US Attorney from MD’s jurisdiction over NSA investigations.

These spooky agencies like keeping their investigations close to home.

So why didn’t Holder include MacBride in the dog-and-pony show last week?

There are several possibilities, all curious:

  • FBI has reason to believe the main leak did come from John Brennan’s conference call with Richard Clarke and Fran Fragos Townsend, which he placed from the White House
  • The op wasn’t run out of CIA after all, but was instead liaised with the Saudis through the NSC or State
  • The story never really existed, and the Saudis just fed us the story of an UndieBomb to give an excuse to start bombing insurgents in Yemen

Maybe there’s some entirely different, completely bureaucratically boring explanation. But Holder’s comment about district based selection (he didn’t use the word jurisdiction, though) suggests it should have been logical for MacBride to take the lead on UndieBomb 2.0. But he isn’t.

Why not?