Hacker calls VoIP a security risk