Hacker News Reader

Single-use credit card numbers (and one-time passwords) would help a ton. Multifactor authentication of any kind would also be good. The problem with all of these ideas is that they're harder to use than fixed CC numbers and passwords.

I do like the convenience of being able to memorize a password or CC number though.

Yes, and it's very simple. Don't type anything important unless you also typed the URL into the address bar. Plenty of real mail from reputable, very phishable, sites actually say exactly this in their real emails-to-customers sometimes.

Laziness, of course, is a problem also.

Yes, Use bookmarks on a trusted computer or better yet type any sensitive domains. Typing www.paypal.com is easy.