Re:Ask HN: Should I report ESTA (esta.cbp.dhs.gov) security ...
by dvtrn on Tuesday May 21, 2019 @11:46AM
(#19971263)
First entity that comes to mind that might be in a position to at least get the right eyes and attention to it, if not outright resolve it would be 18F[1]; that's just a guess-though this seems right up their alley. I believe there are a couple of employees here on HN.
https://18f.gsa.gov/