Ryabkov, the head of RU delegation, went out of his way to deescalate the rhetoric and say that the US delegation came to have a serious discussion. That’s clearly a positive given the quite radical statements coming out of Putin, Lavrov and even Ryabkov prior to the talks
Ryabkov insisted that there is no intention to attack Ukraine. However, I would not read too much into it. Even if he is telling the truth, it’s unlikely that he would be told of such plans (MID is rarely kept in the loop)
Ryabkov insisted that troops on the border are just for exercises, which is clearly false. Not clear that they have any plans to pull them back anytime soon
Russians again insisted that their ‘top issue’ is legal guarantees that Ukraine (and Georgia) will never join NATO, a non-starter for US and NATO
However, they seem open to longer term discussions on these and other issues and the previous heated rhetoric about the need for immediate resolution has gone away
Of course, they can’t keep the troops mobilized in such numbers near Ukraine’s border forever, so this is another positive sign that engaging in such talks may deescalate the situation and reduce risk of invasion
So TL;DR: A few somewhat positive signs from the lowering of the temperature in public comments from Moscow but nothing substantial has changed yet on the ground that reduces the risk of war. Both sides open to more talks past this week but nothing concrete seems to be scheduled
• • •
Missing some Tweet in this thread? You can try to
force a refresh
My original thread on the high likelihood of Russia’s invasion of Ukraine in the next 2 months has sparked a lot of great conversations and debate, so I now want to follow it up with another that discusses a potential solution to resolve this crisis peacefully🧵
First, let’s quickly recap why Russia’s invasion is very likely
TL;DR Putin believes that the time to achieve his strategic objectives of keeping Ukraine out of Western military orbit is NOW because it is
a) doable (militarily, politically and economically) and
b) if he doesn’t do it now, it might be too late in the future
In the last few weeks, I have become increasingly convinced that Kremlin has unfortunately made a decision to invade Ukraine later this winter. While it is still possible for Putin to deescalate, I believe the likelihood is now quite low. Allow me to explain why 🧵
There are numerous signals that Russia has sent recently that make me believe invasion is almost certain, as well as a substantial number of reasons for why this is the preferred route for Putin
Signal:
The obvious one. The military build-up on Ukraine’s borders (in the north, east and south in Crimea). This mobilization is qualitatively and quantitatively different from the past
Unfortunately, National Cyber Director is an unhelpful distraction. The idea that nominating a single person for an office that Congress hasn’t even bothered to fund yet will make a difference in confronting our nation’s numerous cyber challenges is ridiculous 1/4
We have a person in the White House who has been incredibly empowered to solve these problems. Her name is Anne Neuberger and she has a newly created and extraordinarily powerful role on the NSC as Deputy National Security Advisor for Cyber 2/4
I wish someone would tell me at least one thing that people think NCD would do that Anne can’t do in her (arguably much more powerful) role? 3/4
It strikes me that how we respond to the #SolarWindsHack strategically, in public messaging, and in some ways, even tactically, would be vastly difference had we believed it was GRU, and not SVR intelligence service who was behind it 1/
The reason being that SVR, unlike GRU, has no post Soviet history of conductive destructive attacks or attacks that violate established norms (in cyber or physical worlds).
Another reason probably being that SVR is a civilian intelligence agency, not a military one 2/
This yet again highlights the critical importance of attribution for both strategic and tactical decision making in government and private sector alike.
And the importance of specificity of attribution on multiple levels. Nation State vs Criminal, RU vs CN, GRU vs SVR 3/
One word of caution, particularly for reporters publicizing hack victims. Many of the Orion platform customers have downloaded the backdoored update and it would have likely eventually contacted the C2 servers 1/4
Those backdoors and C2 connections are now being discovered by IR teams that are searching logs and systems for indicators published by @FireEye. However, this discovery does not necessarily mean the attackers did anything damaging to that organization 2/4
@FireEye In fact, most appear to have done a DNS lookup to the C2 server and received back a ‘kill switch’ response that indicates the adversaries had no interest in that victim 3/4