Saw an interesting way to handle fusker...
 

Send a 401 header response (authorisation required) instead of 403/404'ing the image or substituting a nasty pic.

If you use 401 then the surfer gets a password prompt dialog box popping up for EVERY SINGLE IMAGE that fusker hotlinked on that page. :Graucho