And heres another good one: https://people.eecs.berkeley.edu/~dawnsong/papers/sec14-pape...

"The Emperor’s New Password Manager: Security Analysis of Web-based Password Managers"