Ask HN: Is there ever a reason to expose an SQL Server to the internet?

No, however, I do know that a big national company does this because the customers need to upload data directly. IMHO they should use an API instead, so no, I don't see any reason to do it. I wouldn't do it, it's a major security risk.

Honeypot? Bored at work? Internet Candy Jar?

Yes, we successfully exposed a SQL server to the internet, but i won't tell you how.

It’s hard to see a legitimate reason for that.