Apparently it's old news, but World of Warcraft has the option of using a one time password token for their login. US banks were required to implement two factor authentication, with mutual identification, but I'm not aware of any who implemented anything involving tokens. My bank uses secret questions plus a special image with a description. It doesn't make me feel any safer.
Lifehacker poses the question, "Would You Pay $7 for Two-Factor Online Banking Authentication?" I think most of the people are saying they would pay $7, and I saw at least one poster who said he would even pay $7 a month for the feature.
I'd definitely pay $7 (well $14, since Mary would need one, too). I'd love to see Verified by Visa use the same token and more web vendors use Verified by Visa.
The unfortunate thing is that banks have no incentive at this point to implement these kinds of systems. They have very little liability, and the cost of what they are liable for is obviously cheaper than implementing reasonable security. I assume that the governments in Europe (where most banks have tokens or other two factor security plus smart card based cards) must have forced the issue at some point.
Here's to hoping that our banks implement stronger security some day soon.