Mine is working again today! Fantastic, very happy.
I'd really like to know how this fixed was pushed so I can prevent this from happening in the future along with other problems they've caused me. I thought I had all of the roku domains blocked but this fix must be getting pushed out differently somehow. Time to start detailed logging all the requests these boxes make.
I was told they push little updates about once a week. This is why the home screen and the themes change without the firmware version updating. If someone figures out which ports needs to be blocked for this to stop, please share them.
They pushed an update on December 14 that also caused the symptoms. I would also like to disable these.
Why did this happen again? It was fixed 9 months ago and today it's broken again!
curl -v -d '' "http://your-ip:8060/keypress/home"
* Trying your-ip:8060...
* Connected to your-ip (your-ip) port 8060
> POST /keypress/home HTTP/1.1
> Host: your-ip:8060
> User-Agent: curl/8.9.1
> Accept: */*
> Content-Length: 2
> Content-Type: application/x-www-form-urlencoded
>
* upload completely sent off: 2 bytes
< HTTP/1.1 403 Forbidden
< Server: Roku/14.1.4 UPnP/1.0 Roku/14.1.4
< Content-Length: 40
< Cache-Control: no-cache
< Content-Type: text/plain; charset="utf-8"
<
ECP command not allowed in Limited mode.* Connection #0 to host your-ip left intact
So it seems there's a new setting. This solved it for me:
Settings > System > Advanced system settings > Control by mobile apps > Permissive
But there was a good 10-12 minutes of panic and I was lucky I found the answer quickly.