Replace the same last vectors by . Applying part a to each independent Gaussian coordinate shows that the probability its contaminated coordinate median exceeds is at least . Independence across coordinates and Bernoulli's inequality give
For sufficiently large as a function of and , the last expression is at least . On this event,
which proves the stated lower bound for the supremum over adversarial perturbations.