Since the tag nonce and uid are sent as plaintext, we also recover the LFSR state before feeding in n_T ⊕ uid (step 4). Note that this LFSR state is the secret key!

Dismantling MIFARE Classic