Whistleblower testifies Twitter was 10+ years behind in security standards