Why bruteforce when you can just passively listen for a working code (once someone else uses their card)?

40 bits of bruteforce at 125khz, with every code being 40 bits long, results in 3125 codes/sec at best, thus it will take roughly 11 years.