How to Know if Your Multi-Factor Authentication (MFA) is Broken