Defending against Users