alt Hacker NewsTheoretically possible, but practically not worth it as it'd would be pretty easy to discover and block (every action is actually handled by the harness) and there's no way to remove it later. Any company that does it would take a huge reputational dent.
Not if you heavily tuned it to trigger on specific environmental cues and in specific companies' environments.