"But all Word Documents open in PV...so we are good". You can smuggle a DDE laced Word Document in via Publisher, which doesn't trigger PV.pic.twitter.com/bXjXneL1xE
You can add location information to your Tweets, such as your city or precise location, from the web and via third-party applications. You always have the option to delete your Tweet location history. Learn more
I haven't seen any OneNote-native attack vector. The Excel vector is already blocked by my registry file link above.
The Excel keys dont appear to stop this: https://twitter.com/enigma0x3/status/921412756233957379 …. Does require a user to double click on the file to update, but that's it.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.