Password managers: attacks and defenses
blog.acolyer.org